[Git][security-tracker-team/security-tracker][master] Add CVE-2019-13311/imagemagick
Salvatore Bonaccorso
carnil at debian.org
Fri Jul 5 10:37:29 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
756848af by Salvatore Bonaccorso at 2019-07-05T09:37:01Z
Add CVE-2019-13311/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2,7 +2,9 @@ CVE-2019-13312 (block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-b
- ffmpeg <unfixed>
NOTE: https://trac.ffmpeg.org/ticket/7980
CVE-2019-13311 (ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...)
- TODO: check
+ - imagemagick <unfixed> (unimportant)
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/1623
+ NOTE: https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91
CVE-2019-13310 (ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...)
TODO: check
CVE-2019-13309 (ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/756848af181a2711790c13ea23fca705fd3ba15f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/756848af181a2711790c13ea23fca705fd3ba15f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190705/0a5283c5/attachment.html>
More information about the debian-security-tracker-commits
mailing list