[Secure-testing-commits] r53655 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-19 09:14:39 +0000 (Wed, 19 Jul 2017)
New Revision: 53655

Modified:
   data/CVE/list
   data/DSA/list
Log:
imagemagick issue CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-19 09:13:37 UTC (rev 53654)
+++ data/CVE/list	2017-07-19 09:14:39 UTC (rev 53655)
@@ -18,7 +18,9 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/b007dd3a048097d8f58949297f5b434612e1e1a3#diff-cdb21e3ad4d6e304030bd19bdc881fce
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/529ff26b68febb2ac03062c58452ea0b4c6edbc1#diff-cdb21e3ad4d6e304030bd19bdc881fce
 CVE-2017-11448 (The ReadJPEGImage function in coders/jpeg.c in ImageMagick before ...)
-	TODO: check
+	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867893)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1737ac82b335e53376382c07b9a500d73dd2aa11
 CVE-2017-11447 (The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick ...)
 	TODO: check
 CVE-2017-11446 (The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an ...)
@@ -304,12 +306,6 @@
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
 	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/525
-CVE-2017-XXXX [clear jpeg memory in order to avoid data leak]
-	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867893)
-	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
-	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
-	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
-	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1737ac82b335e53376382c07b9a500d73dd2aa11
 CVE-2017-XXXX [CPU exhaustion in ReadOneDJVUImage]
 	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867826)
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-07-19 09:13:37 UTC (rev 53654)
+++ data/DSA/list	2017-07-19 09:14:39 UTC (rev 53655)
@@ -1,5 +1,5 @@
 [18 Jul 2017] DSA-3914-1 imagemagick - security update
-	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449}
+	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448}
 	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
 [18 Jul 2017] DSA-3913-1 apache2 - security update