[Secure-testing-commits] r52271 - data/CVE
Moritz Muehlenhoff
jmm at moszumanska.debian.org
Sun Jun 4 10:04:29 UTC 2017
Author: jmm
Date: 2017-06-04 10:04:29 +0000 (Sun, 04 Jun 2017)
New Revision: 52271
Modified:
data/CVE/list
Log:
imagemagick bugs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-06-04 09:10:13 UTC (rev 52270)
+++ data/CVE/list 2017-06-04 10:04:29 UTC (rev 52271)
@@ -37,7 +37,7 @@
CVE-2017-9410
RESERVED
CVE-2017-9409 (In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows ...)
- - imagemagick <unfixed> (low)
+ - imagemagick <unfixed> (low; bug #864090)
[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/458
@@ -47,7 +47,7 @@
NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=100776
NOTE: https://cgit.freedesktop.org/poppler/poppler/commit/?id=b21b041f7948680c03109f0c404400a9dbc4544c
CVE-2017-9407 (In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows ...)
- - imagemagick <unfixed> (low)
+ - imagemagick <unfixed> (low; bug #864089)
[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/459
@@ -57,7 +57,7 @@
NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=100775
NOTE: https://cgit.freedesktop.org/poppler/poppler/commit/?id=278439531b13b0b047dbe3a75aa3f1b3407c8bd4
CVE-2017-9405 (In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows ...)
- - imagemagick <unfixed> (low)
+ - imagemagick <unfixed> (low; bug #864087)
[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/457
More information about the Secure-testing-commits
mailing list