[Secure-testing-commits] r53657 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-19 09:17:11 +0000 (Wed, 19 Jul 2017)
New Revision: 53657

Modified:
   data/CVE/list
   data/DSA/list
Log:
imagemagick CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-19 09:15:52 UTC (rev 53656)
+++ data/CVE/list	2017-07-19 09:17:11 UTC (rev 53657)
@@ -11,7 +11,9 @@
 CVE-2017-11451
 	RESERVED
 CVE-2017-11450 (coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to ...)
-	TODO: check
+	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867894)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602
 CVE-2017-11449 (coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable ...)
 	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867896)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
@@ -291,12 +293,6 @@
 	- tiff3 <removed>
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2715
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556
-CVE-2017-XXXX [Avoid heap based overflow for jpeg]
-	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867894)
-	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
-	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
-	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
-	NOTE: https://github.com/ImageMagick/ImageMagick/commit/948356eec65aea91995d4b7cc487d197d2c5f602
 CVE-2017-XXXX [memory leak in ReadMATImage in mat.c]
 	- imagemagick 8:6.9.7.4+dfsg-12 (bug #867823)
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-07-19 09:15:52 UTC (rev 53656)
+++ data/DSA/list	2017-07-19 09:17:11 UTC (rev 53657)
@@ -1,5 +1,5 @@
 [18 Jul 2017] DSA-3914-1 imagemagick - security update
-	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448 CVE-2017-11447}
+	{CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11360 CVE-2017-11352 CVE-2017-11449 CVE-2017-11448 CVE-2017-11447 CVE-2017-11450}
 	[jessie] - imagemagick 8:6.8.9.9-5+deb8u10
 	[stretch] - imagemagick 8:6.9.7.4+dfsg-11+deb9u1
 [18 Jul 2017] DSA-3913-1 apache2 - security update