[Secure-testing-commits] r55709 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Sep 13 04:18:02 UTC 2017


Author: carnil
Date: 2017-09-13 04:18:02 +0000 (Wed, 13 Sep 2017)
New Revision: 55709

Modified:
   data/CVE/list
Log:
Reference commits for CVE-2017-1434{1,2}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-13 01:26:21 UTC (rev 55708)
+++ data/CVE/list	2017-09-13 04:18:02 UTC (rev 55709)
@@ -12,10 +12,13 @@
 CVE-2017-14342 (ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ...)
 	- imagemagick <unfixed> (unimportant)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/650
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/4e378ea8fb99e869768f34e900105e8c769adfcd
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/6d5b22baedd49ef8a35011789bd600762ce1ef21
 CVE-2017-14341 (ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in ...)
 	- imagemagick <unfixed> (low)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/654
-	NOTE: https://github.com/ImageMagick/ImageMagick/commit/4eae304e773bad8a876c3c26fdffac24d4253ae4
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/4eae304e773bad8a876c3c26fdffac24d4253ae4
 CVE-2017-14348 (LibRaw before 0.18.4 has a heap-based Buffer Overflow in the ...)
 	- libraw <unfixed>
 	NOTE: https://github.com/LibRaw/LibRaw/issues/100




More information about the Secure-testing-commits mailing list