[Secure-testing-commits] r55851 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-18 09:18:40 +0000 (Mon, 18 Sep 2017)
New Revision: 55851

Modified:
   data/CVE/list
Log:
Add CVE-2017-14531/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-18 09:15:13 UTC (rev 55850)
+++ data/CVE/list	2017-09-18 09:18:40 UTC (rev 55851)
@@ -103,7 +103,10 @@
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1942317d9208ea17ee17d976a39768cd51d74160
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/c55fb18c3f78445d100a378ab8b3c0acd53c6590
 CVE-2017-14531 (ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/718
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/69967f4161bd14d8e03ea463d6545da442a6ea78
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/1385a09732c261f1f403a9af6700979ca56c76d3
 CVE-2017-14530 (WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for ...)
 	TODO: check
 CVE-2017-14529 (The pe_print_idata function in peXXigen.c in the Binary File Descriptor ...)