[Secure-testing-commits] r52401 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-06-07 21:57:25 +0000 (Wed, 07 Jun 2017)
New Revision: 52401

Modified:
   data/CVE/list
Log:
new imagemagick issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-07 21:10:12 UTC (rev 52400)
+++ data/CVE/list	2017-06-07 21:57:25 UTC (rev 52401)
@@ -5,11 +5,22 @@
 CVE-2017-9502
 	RESERVED
 CVE-2017-9501 (In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the ...)
-	TODO: check
+	- imagemagick <unfixed> (low)
+	[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/491
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/01843366d6a7b96e22ad7bb67f3df7d9fd4d5d74
 CVE-2017-9500 (In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the ...)
-	TODO: check
+	- imagemagick <unfixed> (low)
+	[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/500
 CVE-2017-9499 (In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the ...)
-	TODO: check
+	- imagemagick <unfixed> (low)
+	[stretch] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	[jessie] - imagemagick <no-dsa> (Minor issue, wait until more severe issues arise)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/492
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/7fd419441bc7103398e313558171d342c6315f44
 CVE-2017-9498
 	RESERVED
 CVE-2017-9497