Author: carnil
Date: 2017-01-17 05:42:15 +0000 (Tue, 17 Jan 2017)
New Revision: 48124
Modified:
data/CVE/list
Log:
Second round of imagemagick CVEs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-01-17 05:39:04 UTC (rev 48123)
+++ data/CVE/list 2017-01-17 05:42:15 UTC (rev 48124)
@@ -10,22 +10,22 @@
- imagemagick <unfixed> (bug #851381)
NOTE:
https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31161
NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
-CVE-2017-XXXX [memory leak in caption and label handling]
+CVE-2016-10146 [memory leak in caption and label handling]
- imagemagick 8:6.9.7.0+dfsg-2 (bug #851380)
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456
- NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2017/01/16/6
-CVE-2017-XXXX [out of bound in psd file handling]
+ NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
+CVE-2017-5509 [out of bound in psd file handling]
- imagemagick <unfixed> (bug #851377)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/350
- NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2017/01/16/6
-CVE-2017-XXXX [memory corruption heap overflow, psb file related, another one]
+ NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
+CVE-2017-5510 [memory corruption heap overflow, psb file related, another one]
- imagemagick <unfixed> (bug #851376)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/348
- NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2017/01/16/6
-CVE-2017-XXXX [memory corruption heap overflow, psb file related]
+ NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
+CVE-2017-5511 [memory corruption heap overflow, psb file related]
- imagemagick <unfixed> (bug #851374)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/347
- NOTE: CVE Request:
http://www.openwall.com/lists/oss-security/2017/01/16/6
+ NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
CVE-2016-10144 [ipl file missing malloc check]
- imagemagick <unfixed> (bug #851485)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/97566cf2806c0a5a86e884c96831a0c3b1ec6c20
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
