[Git][security-tracker-team/security-tracker][master] Add CVE-2019-10649/imagemagick

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2361996d by Salvatore Bonaccorso at 2019-03-30T20:17:40Z
Add CVE-2019-10649/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,7 +27,10 @@ CVE-2019-10651
 CVE-2019-10650 (In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in ...)
 	TODO: check
 CVE-2019-10649 (In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SV ...)
-	TODO: check
+	- imagemagick <unfixed> (unimportant)
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1533
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/d3ae9c19125c8704b4866381f7a064ca2cbdc006
+	NOTE: ImageMagick6: https://github.com/ImageMagick/ImageMagick6/commit/e3417aebe17cbe274b7361aa92c83226ca5b646b
 CVE-2019-10648 (Robocode through 1.9.3.5 allows remote attackers to cause external ser ...)
 	TODO: check
 CVE-2019-10647 (ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2361996d8baafa4b9a7c55fff9232cf59971142e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2361996d8baafa4b9a7c55fff9232cf59971142e
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190330/e59bc2bb/attachment.html>