[Secure-testing-commits] r53466 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jul 13 21:00:17 UTC 2017


Author: carnil
Date: 2017-07-13 21:00:17 +0000 (Thu, 13 Jul 2017)
New Revision: 53466

Modified:
   data/CVE/list
Log:
Merge entries for CVE-2017-11188

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-13 20:58:26 UTC (rev 53465)
+++ data/CVE/list	2017-07-13 21:00:17 UTC (rev 53466)
@@ -47,9 +47,6 @@
 CVE-2017-11189 (unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a ...)
 	- unrar-free <unfixed> (unimportant)
 	NOTE: Crash in CLI tool, no security impact
-CVE-2017-11188 (The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a ...)
-	- imagemagick <unfixed>
-	NOTE: https://github.com/ImageMagick/ImageMagick/issues/509
 CVE-2017-11187 (phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks ...)
 	NOT-FOR-US: phpMyFAQ
 CVE-2017-11186
@@ -417,7 +414,7 @@
 	- imagemagick <unfixed> (bug #867808)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/518
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/224bc946b24824a77e8e8c52ee07e9bc65796e30
-CVE-2017-XXXX [CPU exhaustion in ReadDPXImage]
+CVE-2017-11188 [CPU exhaustion in ReadDPXImage]
 	- imagemagick <unfixed> (bug #867806)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/509
 CVE-2017-11113 (In ncurses 6.0, there is a NULL Pointer Dereference in the ...)




More information about the Secure-testing-commits mailing list