[Secure-testing-commits] r53656 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-19 09:15:52 +0000 (Wed, 19 Jul 2017)
New Revision: 53656

Modified:
   data/CVE/list
   data/DSA/list
Log:
imagemagick CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-19 09:14:39 UTC (rev 53655)
+++ data/CVE/list	2017-07-19 09:15:52 UTC (rev 53656)
@@ -22,7 +22,9 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1737ac82b335e53376382c07b9a500d73dd2aa11
 CVE-2017-11447 (The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick ...)
-	TODO: check
+	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867897)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/8c10b9247509c0484b55330458846115131ec2ae#diff-0a5dc34e461f3c458e758c199f2dc46d
 CVE-2017-11446 (The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an ...)
 	TODO: check
 CVE-2017-11445 (Subrion CMS before 4.1.6 has a SQL injection vulnerability in ...)
@@ -289,12 +291,6 @@
 	- tiff3 <removed>
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2715
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556
-CVE-2017-XXXX [avoid a memory leak during screenshot]
-	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867897)
-	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
-	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
-	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
-	NOTE: https://github.com/ImageMagick/ImageMagick/commit/8c10b9247509c0484b55330458846115131ec2ae#diff-0a5dc34e461f3c458e758c199f2dc46d
 CVE-2017-XXXX [Avoid heap based overflow for jpeg]
 	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867894)
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-07-19 09:14:39 UTC (rev 53655)
+++ data/DSA/list	2017-07-19 09:15:52 UTC (rev 53656)
@@ -1,5 +1,5 @@
 [18 Jul 2017] DSA-3914-1 imagemagick - security update
-	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448}
+	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448 CVE-2017-11447}
 	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
 [18 Jul 2017] DSA-3913-1 apache2 - security update