[Secure-testing-commits] r56403 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-04 13:49:35 +0000 (Wed, 04 Oct 2017)
New Revision: 56403

Modified:
   data/CVE/list
Log:
Add CVE-2017-15016/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-04 13:48:12 UTC (rev 56402)
+++ data/CVE/list	2017-10-04 13:49:35 UTC (rev 56403)
@@ -64,7 +64,10 @@
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/5a1006a249516a875558c3d642e719b1eac8f820
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/0cff8bac0a47f8693cfe57f026fcd752689ff375
 CVE-2017-15016 (ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/725
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/8254d24b86a62803231773ecf54c707aef4a1457
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/27f8ba82ddd665ab41cef6588128f680cbd69905
 CVE-2017-15015 (ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ...)
 	TODO: check
 CVE-2017-15014