[Secure-testing-commits] r54094 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-07-30 18:58:11 +0000 (Sun, 30 Jul 2017)
New Revision: 54094

Modified:
   data/CVE/list
Log:
Clarify comment for CVE-2017-10995

This was the intention of the note, but I apparently commited the entry
overly-eager loosing the details to commit.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-30 18:58:01 UTC (rev 54093)
+++ data/CVE/list	2017-07-30 18:58:11 UTC (rev 54094)
@@ -2184,7 +2184,8 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/538
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/24430226caf7eb468b4180f2883b2563e8cc1b23
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1fdc09dc8f9522f07f5f501fe8453765ad82556c
-	NOTE: The second commit is not relevant.
+	NOTE: The second commit is not security senstive relevant, cf.
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/538#issuecomment-317047977
 CVE-2017-10994 (Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary ...)
 	NOT-FOR-US: Foxit Reader
 CVE-2017-10993 (Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to ...)