[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2018-5246/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b0236d4b by Salvatore Bonaccorso at 2018-01-05T22:19:01+01:00
Add CVE-2018-5246/imagemagick

- - - - -
bd5337bd by Salvatore Bonaccorso at 2018-01-05T22:20:38+01:00
Add CVE-2017-18022/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -16,7 +16,10 @@ CVE-2018-5247 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAIma
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/0ecb22aa909e52d86b4545aa7a51f7a0922147e6
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/d85c34f8bd699c31b94118babc6c0445eecc9920
 CVE-2018-5246 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/929
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/1c3dd700bbb17837ee6f540aff3eafc76262accf
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/e59dc85e6ce58fd7618c3680b2a8def62050582f
 CVE-2018-5245
 	RESERVED
 CVE-2018-5243
@@ -40,7 +43,10 @@ CVE-2018-5235
 CVE-2018-5234
 	RESERVED
 CVE-2017-18022 (In ImageMagick 7.0.7-12 Q16, there are memory leaks in ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/904
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/8cf0676455929a067257400e8020dea6ca94c1a4
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/e7649e96a7730dd116afb629b372c5772be0b900
 CVE-2018-5244 (In Xen 4.10, new infrastructure was introduced as part of an overhaul ...)
 	- xen <not-affected> (Only affects Xen 4.10 onwards)
 	NOTE: https://xenbits.xen.org/xsa/advisory-253.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/52be54d9907c846c92531a399547b0f47d39845f...bd5337bd159b7afc0754128a4b6c1f30938e421e

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/52be54d9907c846c92531a399547b0f47d39845f...bd5337bd159b7afc0754128a4b6c1f30938e421e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180105/01527f17/attachment.html>