[Secure-testing-commits] r53898 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Jul 25 12:44:49 UTC 2017


Author: carnil
Date: 2017-07-25 12:44:49 +0000 (Tue, 25 Jul 2017)
New Revision: 53898

Modified:
   data/CVE/list
Log:
Mark CVE-2017-11522 as not-affected for iamgemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-25 12:26:50 UTC (rev 53897)
+++ data/CVE/list	2017-07-25 12:44:49 UTC (rev 53898)
@@ -269,7 +269,7 @@
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078
 	NOTE: Fixed by (ImageMagick-6): https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78
 CVE-2017-11522 (The WriteOnePNGImage function in coders/png.c in ImageMagick through ...)
-	- imagemagick <unfixed> (bug #869209)
+	- imagemagick <not-affected> (bug #869209; vulnerable code not present, ImageMagick-7 issue only)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/586
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/816ecab6c532ae086ff4186b3eaf4aa7092d536f
 CVE-2017-11504




More information about the Secure-testing-commits mailing list