[Git][security-tracker-team/security-tracker][master] imagemagick non-issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3784fefd by Moritz Muehlenhoff at 2018-10-29T14:13:54Z
imagemagick non-issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7834,10 +7834,10 @@ CVE-2018-15609
 CVE-2018-15608 (Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the ...)
 	NOT-FOR-US: Zoho ManageEngine ADManager Plus
 CVE-2018-15607 (In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 ...)
-	- imagemagick <unfixed> (low)
-	[stretch] - imagemagick <ignored> (Minor issue)
-	[jessie] - imagemagick <ignored> (Minor issue)
+	- imagemagick <unfixed> (unimportant)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1255
+	NOTE: This is mitigated by the default policies, if anyone modifies those they need
+	NOTE: be tuned to the deployment's memory buildout
 CVE-2018-15606 (An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 ...)
 	NOT-FOR-US: SuiteCRM
 CVE-2018-15605 (An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3784fefd226341b6df7829c2c980a1e52ff76544

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3784fefd226341b6df7829c2c980a1e52ff76544
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181029/5b14915b/attachment.html>