[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-5247/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
52be54d9 by Salvatore Bonaccorso at 2018-01-05T22:17:24+01:00
Add CVE-2018-5247/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -11,7 +11,10 @@ CVE-2018-5248 (In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-re
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/c76434c16b5ac8861ee0c5d5c3ab8974fae3d624
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/0272305f91763b5ce119a2c7a0e0084d8241a58d
 CVE-2018-5247 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/928
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/0ecb22aa909e52d86b4545aa7a51f7a0922147e6
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/d85c34f8bd699c31b94118babc6c0445eecc9920
 CVE-2018-5246 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage ...)
 	TODO: check
 CVE-2018-5245



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/52be54d9907c846c92531a399547b0f47d39845f

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/52be54d9907c846c92531a399547b0f47d39845f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180105/1aebcb9f/attachment.html>