Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f4ae9d7d by Salvatore Bonaccorso at 2018-01-13T08:13:13+01:00
Add CVE-2017-18027/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -358,7 +358,10 @@ CVE-2017-18028 (In ImageMagick 7.0.7-1 Q16, a memory
exhaustion vulnerability wa
NOTE: ImageMagick-6:
https://github.com/ImageMagick/ImageMagick/commit/740985d9bd3f1c50d622c3496bb2e75d44b65a91
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/32a3eeb9e0da083cbc05909e4935efdbf9846df9
CVE-2017-18027 (In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was
found in ...)
- TODO: check
+ - imagemagick <unfixed> (unimportant)
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/734
+ NOTE:
https://github.com/ImageMagick/ImageMagick/commit/a43f4155ee916fbed080acd534232a9d2396b5b5
+ NOTE: ImageMagick-6:
https://github.com/ImageMagick/ImageMagick/commit/6a88a234cbb88a06fcb7e7ebe6668267b72fa787
CVE-2016-10706 (The Jetpack plugin before 4.0.3 for WordPress has XSS via a
crafted ...)
NOT-FOR-US: WordPress plugin jetpack
CVE-2016-10705 (The Jetpack plugin before 4.0.4 for WordPress has XSS via the
Likes ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f4ae9d7d34b1131fca8d910c561179c43164b6d7
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f4ae9d7d34b1131fca8d910c561179c43164b6d7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
