[Secure-testing-commits] r56152 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Sep 26 10:15:33 UTC 2017


Author: carnil
Date: 2017-09-26 10:15:33 +0000 (Tue, 26 Sep 2017)
New Revision: 56152

Modified:
   data/CVE/list
Log:
Reference fixes for CVE-2017-14739

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-26 09:24:20 UTC (rev 56151)
+++ data/CVE/list	2017-09-26 10:15:33 UTC (rev 56152)
@@ -14,6 +14,11 @@
 CVE-2017-14739 (The AcquireResampleFilterThreadSet function in ...)
 	- imagemagick <unfixed>
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/780
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/6017a80fe8327fefb77fa677d81154db2b857d1d
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/700fcf95b2c3f554dfbe75833b91f19dde208089
+	NOTE: Requires additional fixes:
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/bbc582d5439a7f9338c6bdc8c34b1ae221ae5214
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/67a633df9386704f45d1ad24f7f5af8a5d11f4a3
 CVE-2017-14738
 	RESERVED
 CVE-2017-14737 (A cryptographic cache-based side channel in the RSA implementation in ...)




More information about the Secure-testing-commits mailing list