[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-5358/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4029daaf by Salvatore Bonaccorso at 2018-01-13T08:15:08+01:00
Add CVE-2018-5358/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -404,7 +404,10 @@ CVE-2018-5360
 CVE-2018-5359
 	RESERVED
 CVE-2018-5358 (ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/939
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/4e72d445220287727d7886a5f17a10caf944a802
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/ed80c93e4cbf2727ead75fd8bd5e5d9ecbe762f9
 CVE-2018-5357 (ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function ...)
 	TODO: check
 CVE-2018-5356



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4029daafbf45d99e1673aae064cb7a085fe00f20

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4029daafbf45d99e1673aae064cb7a085fe00f20
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180113/434a7d2c/attachment.html>