[Git][security-tracker-team/security-tracker][master] CVE-2019-13304/imagemagick: additional commit link

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
659d3789 by Hugo Lefeuvre at 2019-08-13T11:24:50Z
CVE-2019-13304/imagemagick: additional commit link

Similar one-byte buffer overflow, bundled in CVE-2019-13304.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5451,8 +5451,8 @@ CVE-2019-13391 (In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier
 	- imagemagick <unfixed> (bug #931633)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1588
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/f6ffc702c6eecd963587273a429dcd608c648984
-	NOTE: Patch is insufficient, and most likely broken. It is partly reverted by
-	NOTE: the CVE-2019-13308 patch, which seems to be the actual patch for this issue.
+	NOTE: Patch is insufficient, partly reverted by the CVE-2019-13308 patch
+	NOTE: which seems to be the actual patch for this issue.
 CVE-2019-13390 (In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in l ...)
 	- ffmpeg <unfixed> (low; bug #932535)
 	[buster] - ffmpeg <postponed> (Minor issue, wait until fixed in 4.1.x branch)
@@ -5676,6 +5676,7 @@ CVE-2019-13304 (ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at co
 	- imagemagick <unfixed> (bug #931453)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1614
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/bfa3b9610c83227894c92b0d312ad327fceb6241
+	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/a2f84f23d064e98f423aa0d050ff98838cf0a1b1
 CVE-2019-13303 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCo ...)
 	- imagemagick <not-affected> (Only affects Imagemagick 7)
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/d29148fae06c01ef215940e084cf41853c117bab



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/659d37899e12712638b6918d3bf8e6a384f397f4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/659d37899e12712638b6918d3bf8e6a384f397f4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190813/bf722f10/attachment.html>