[Secure-testing-commits] r55536 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-07 09:20:16 +0000 (Thu, 07 Sep 2017)
New Revision: 55536

Modified:
   data/CVE/list
Log:
Add CVE-2017-14173/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-07 09:20:06 UTC (rev 55535)
+++ data/CVE/list	2017-09-07 09:20:16 UTC (rev 55536)
@@ -8,7 +8,9 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/04a567494786d5bb50894fc8bb8fea0cf496bea8
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/f68a98a9d385838a1c73ec960a14102949940a64
 CVE-2017-14173 (In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/713
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/48bcf7c39302cdf9b0d9202ad03bf1b95152c44d
 CVE-2017-14172 (In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due ...)
 	TODO: check
 CVE-2017-14171 (In libavformat/nsvdec.c in FFmpeg 3.3.3, a DoS in ...)