[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-12976/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b97432cd by Salvatore Bonaccorso at 2019-06-27T06:31:39Z
Add CVE-2019-12976/imagemagick

- - - - -
8761ba35 by Salvatore Bonaccorso at 2019-06-27T06:32:18Z
Add CVE-2019-12975/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,9 +25,11 @@ CVE-2019-12977 (ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerab
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1518
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/e6103897fae2ed47e24b9cf7de719eea877b0504
 CVE-2019-12976 (ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1520
 CVE-2019-12975 (ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXIm ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1517
 CVE-2019-12974 (A NULL pointer dereference in the function ReadPANGOImage in coders/pa ...)
 	TODO: check
 CVE-2019-12973 (In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/44b23720375b6c2c754b1d3c96084e4c07ab7153...8761ba3568877cfc6852adc62e227373c0eca4df

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/44b23720375b6c2c754b1d3c96084e4c07ab7153...8761ba3568877cfc6852adc62e227373c0eca4df
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190627/886a42a9/attachment.html>