[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18254/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c919fe79 by Salvatore Bonaccorso at 2018-03-27T12:39:24+02:00
Add CVE-2017-18254/imagemagick

Mark as unimportant as it only consist of a memory leak following other
classifications itself.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -70,7 +70,10 @@ CVE-2018-9022
 CVE-2018-9021
 	RESERVED
 CVE-2017-18254 (An issue was discovered in ImageMagick 7.0.7. A memory leak ...)
-	TODO: check
+	- imagemagick 8:6.9.9.34+dfsg-3 (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/24d5699753170c141b46816284430516c2d48fed
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/53ea13989003cdb4955024f95b4a0158a2e871c6
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/808
 CVE-2017-18253 (An issue was discovered in ImageMagick 7.0.7. A NULL pointer ...)
 	TODO: check
 CVE-2017-18252 (An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c919fe79f0b9d8e3b2ae3676254961c41422f192

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c919fe79f0b9d8e3b2ae3676254961c41422f192
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180327/c777c7ee/attachment.html>