Author: jmm
Date: 2017-09-13 09:24:15 +0000 (Wed, 13 Sep 2017)
New Revision: 55728
Modified:
data/CVE/list
Log:
new im issue
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-09-13 09:21:17 UTC (rev 55727)
+++ data/CVE/list 2017-09-13 09:24:15 UTC (rev 55728)
@@ -23,7 +23,10 @@
CVE-2017-14401 (The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL
injection ...)
NOT-FOR-US: EyesOfNetwork (EON)
CVE-2017-14400 (In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in
...)
- TODO: check
+ - imagemagick <unfixed> (low)
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/746
+ NOTE: im6 patch:
https://github.com/ImageMagick/ImageMagick/commit/04b863f15effa4375e4ee42f413f0246062b48af
+ NOTE: im6 patch:
https://github.com/ImageMagick/ImageMagick/commit/44a55580ac8c01d8cff1e6e0063820af113f8591
CVE-2017-14399 (In BlackCat CMS 1.2.2, unrestricted file upload is possible in
...)
NOT-FOR-US: BlackCat CMS
CVE-2017-14398 (rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to
read and ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
