[Secure-testing-commits] r55467 - data/CVE

László Böszörményi gcs at moszumanska.debian.org
Tue Sep 5 16:22:42 UTC 2017


Author: gcs
Date: 2017-09-05 16:22:41 +0000 (Tue, 05 Sep 2017)
New Revision: 55467

Modified:
   data/CVE/list
Log:
Add CVE-2017-{1377[567],14103}/graphicsmagick fixed version in unstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-05 16:07:58 UTC (rev 55466)
+++ data/CVE/list	2017-09-05 16:22:41 UTC (rev 55467)
@@ -139,7 +139,7 @@
 	- linux 4.12.6-1
 	NOTE: Fixed by: https://git.kernel.org/linus/499350a5a6e7512d9ed369ed63a4244b6536f4f8 (v4.12-rc3)
 CVE-2017-14103 (The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in ...)
-	- graphicsmagick <unfixed>
+	- graphicsmagick 1.3.26-8
 	[stretch] - graphicsmagick <not-affected> (Incomplete fix not applied)
 	[jessie] - graphicsmagick <not-affected> (Incomplete fix not applied)
 	NOTE: Fixed by: http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51f
@@ -851,14 +851,14 @@
 	NOT-FOR-US: Fiyo CMS
 CVE-2017-13777 (GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() ...)
 	{DLA-1082-1}
-	- graphicsmagick <unfixed> (low)
+	- graphicsmagick 1.3.26-8 (low)
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e
 CVE-2017-13776 (GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() ...)
 	{DLA-1082-1}
-	- graphicsmagick <unfixed> (low)
+	- graphicsmagick 1.3.26-8 (low)
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5e
 CVE-2017-13775 (GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() ...)
-	- graphicsmagick <unfixed> (low)
+	- graphicsmagick 1.3.26-8 (low)
 	[wheezy] - graphicsmagick <not-affected> (Vulnerable code not present)
 	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/b037d79b6ccd
 CVE-2017-13774 (Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to ...)




More information about the Secure-testing-commits mailing list