[Git][security-tracker-team/security-tracker][master] Triage imagemagick: CVE-2017-18211,CVE-2017-18209,CVE-2017-12434

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
01469a28 by Markus Koschany at 2019-05-12T21:56:22Z
Triage imagemagick: CVE-2017-18211,CVE-2017-18209,CVE-2017-12434

These issues do not affect the version in Jessie. Change status from ignored to
not-affected.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62943,7 +62943,7 @@ CVE-2018-7580
 CVE-2017-18211 (In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was fou ...)
 	- imagemagick 8:6.9.9.34+dfsg-3 (low)
 	[stretch] - imagemagick <ignored> (Minor issue)
-	[jessie] - imagemagick <ignored> (Minor issue)
+	[jessie] - imagemagick <not-affected> (vulnerable code not present)
 	[wheezy] - imagemagick <not-affected> (vulnerable code not present)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/792
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/96c2fab85e1699c87080271254c5a01387805564
@@ -62957,7 +62957,7 @@ CVE-2017-18210 (In ImageMagick 7.0.7, a NULL pointer dereference vulnerability w
 CVE-2017-18209 (In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in Im ...)
 	- imagemagick 8:6.9.9.34+dfsg-3 (low)
 	[stretch] - imagemagick <ignored> (Minor issue)
-	[jessie] - imagemagick <ignored> (Minor issue)
+	[jessie] - imagemagick <not-affected> (vulnerable code not present)
 	[wheezy] - imagemagick <not-affected> (vulnerable code not present)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/790
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/6ac2858a87df6d645813e43928b4f01a3169ad3f
@@ -102059,7 +102059,7 @@ CVE-2017-12434 (In ImageMagick 7.0.6-1, a missing NULL check vulnerability was f
 	{DSA-4019-1}
 	- imagemagick 8:6.9.7.4+dfsg-14 (bug #870014)
 	[stretch] - imagemagick <ignored> (Minor issue)
-	[jessie] - imagemagick <ignored> (Minor issue)
+	[jessie] - imagemagick <not-affected> (vulnerable code not present)
 	[wheezy] - imagemagick <not-affected> (vulnerable code not present)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/547
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/6767f31cac3eacdc9dc41b3193a73bdd37610375



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/01469a284f5cdee9be8be6a21b38c8596e31e18f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/01469a284f5cdee9be8be6a21b38c8596e31e18f
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190512/4de09cad/attachment.html>