[Secure-testing-commits] r56402 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-04 13:48:12 +0000 (Wed, 04 Oct 2017)
New Revision: 56402

Modified:
   data/CVE/list
Log:
Add CVE-2017-15017/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-04 13:38:57 UTC (rev 56401)
+++ data/CVE/list	2017-10-04 13:48:12 UTC (rev 56402)
@@ -59,7 +59,10 @@
 	- lame <unfixed>
 	NOTE: https://sourceforge.net/p/lame/bugs/480/
 CVE-2017-15017 (ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/723
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/5a1006a249516a875558c3d642e719b1eac8f820
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/0cff8bac0a47f8693cfe57f026fcd752689ff375
 CVE-2017-15016 (ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ...)
 	TODO: check
 CVE-2017-15015 (ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ...)