[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-5685/graphicsmagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b945d6c by Salvatore Bonaccorso at 2018-01-14T10:39:08+01:00
Add CVE-2018-5685/graphicsmagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -25,7 +25,9 @@ CVE-2018-5687 (NewsBee allows XSS via the Company Name field in the Settings und
 CVE-2018-5686 (In MuPDF 1.12.0, there is an infinite loop vulnerability and ...)
 	TODO: check
 CVE-2018-5685 (In GraphicsMagick 1.3.27, there is an infinite loop and application ...)
-	TODO: check
+	- graphicsmagick <unfixed>
+	NOTE: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/52a91ddb1aa6
+	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/541/
 CVE-2018-5684 (In Libav through 12.2, there is an invalid memcpy call in the ...)
 	TODO: check
 CVE-2018-5683



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b945d6c73e9804610edef256e82f5a17763e70d

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b945d6c73e9804610edef256e82f5a17763e70d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180114/018b000f/attachment.html>