[Secure-testing-commits] r53657 - in data: CVE DSA
Moritz Muehlenhoff
jmm at moszumanska.debian.org
Wed Jul 19 09:17:11 UTC 2017
Author: jmm
Date: 2017-07-19 09:17:11 +0000 (Wed, 19 Jul 2017)
New Revision: 53657
Modified:
data/CVE/list
data/DSA/list
Log:
imagemagick CVEfied
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-07-19 09:15:52 UTC (rev 53656)
+++ data/CVE/list 2017-07-19 09:17:11 UTC (rev 53657)
@@ -11,7 +11,9 @@
CVE-2017-11451
RESERVED
CVE-2017-11450 (coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to ...)
- TODO: check
+ - imagemagick 8:6.9.7.4+dfsg-12 (bug #867894)
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
+ NOTE: https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602
CVE-2017-11449 (coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable ...)
- imagemagick 8:6.9.7.4+dfsg-12 (bug #867896)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
@@ -291,12 +293,6 @@
- tiff3 <removed>
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2715
NOTE: Fixed by: https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556
-CVE-2017-XXXX [Avoid heap based overflow for jpeg]
- - imagemagick 8:6.9.7.4+dfsg-12 (bug #867894)
- [stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
- [jessie] - imagemagick 8:6.8.9.9-5+deb8u10
- NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
- NOTE: https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602
CVE-2017-XXXX [memory leak in ReadMATImage in mat.c]
- imagemagick 8:6.9.7.4+dfsg-12 (bug #867823)
[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
Modified: data/DSA/list
===================================================================
--- data/DSA/list 2017-07-19 09:15:52 UTC (rev 53656)
+++ data/DSA/list 2017-07-19 09:17:11 UTC (rev 53657)
@@ -1,5 +1,5 @@
[18 Jul 2017] DSA-3914-1 imagemagick - security update
- {CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448 CVE-2017-11447}
+ {CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448 CVE-2017-11447 CVE-2017-11450}
[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
[18 Jul 2017] DSA-3913-1 apache2 - security update
More information about the Secure-testing-commits
mailing list