[Secure-testing-commits] r56644 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Oct 12 09:36:07 UTC 2017


Author: carnil
Date: 2017-10-12 09:36:07 +0000 (Thu, 12 Oct 2017)
New Revision: 56644

Modified:
   data/CVE/list
Log:
Add reference to fix for CVE-2017-15281

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-12 09:31:53 UTC (rev 56643)
+++ data/CVE/list	2017-10-12 09:36:07 UTC (rev 56644)
@@ -16,6 +16,8 @@
 CVE-2017-15281 (ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote ...)
 	- imagemagick <unfixed> (low)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/832
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/e9d1c2adae866861a291535997b2263f26becb1e
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/32cbfceeee57962321b2ead627129c9d9ffbfcdb
 CVE-2017-15280 (XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 ...)
 	NOT-FOR-US: Umbraco CMS
 CVE-2017-15279 (Cross-site scripting (XSS) vulnerability in Umbraco CMS before 7.7.3 ...)




More information about the Secure-testing-commits mailing list