[Secure-testing-commits] r57362 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-06 09:15:49 +0000 (Mon, 06 Nov 2017)
New Revision: 57362

Modified:
   data/CVE/list
Log:
Add CVE-2017-16546/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-06 09:13:35 UTC (rev 57361)
+++ data/CVE/list	2017-11-06 09:15:49 UTC (rev 57362)
@@ -51,7 +51,10 @@
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/785758bbbfcc
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/517/
 CVE-2017-16546 (The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/e04cf3e9524f50ca336253513d977224e083b816
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/851
 CVE-2017-16545 (The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does ...)
 	TODO: check
 CVE-2017-16544