[Secure-testing-commits] r53661 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-07-19 10:24:27 +0000 (Wed, 19 Jul 2017)
New Revision: 53661

Modified:
   data/CVE/list
Log:
Add new imagemagick issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-19 10:22:31 UTC (rev 53660)
+++ data/CVE/list	2017-07-19 10:24:27 UTC (rev 53661)
@@ -28,7 +28,10 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/556
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/8c10b9247509c0484b55330458846115131ec2ae#diff-0a5dc34e461f3c458e758c199f2dc46d
 CVE-2017-11446 (The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/537
+	NOTE: ImageMagick-7: https://github.com/ImageMagick/ImageMagick/commit/787ee25e9fb0e4e0509121342371d925fe5044f8
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/96182884778bfc43d6a9a0abd90cedb5d8cf8977
 CVE-2017-11445 (Subrion CMS before 4.1.6 has a SQL injection vulnerability in ...)
 	NOT-FOR-US: Subrion CMS
 CVE-2017-11444 (Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in ...)