[Git][security-tracker-team/security-tracker][master] imagemagick triage for jessie
Hugo Lefeuvre
hle at debian.org
Sun May 5 13:00:24 BST 2019
Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c44636c9 by Hugo Lefeuvre at 2019-05-05T12:00:06Z
imagemagick triage for jessie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -712,6 +712,7 @@ CVE-2019-11472 (ReadXWDImage in coders/xwd.c in the XWD image parsing component
- imagemagick <unfixed> (low; bug #927828)
[buster] - imagemagick <ignored> (Minor issue)
[stretch] - imagemagick <ignored> (Minor issue)
+ [jessie] - imagemagick <ignored> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1546
NOTE: https://github.com/ImageMagick/ImageMagick6/commit/f663dfb8431c97d95682a2b533cca1c8233d21b4
CVE-2019-11471 (libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_al ...)
@@ -2639,6 +2640,7 @@ CVE-2019-10714 (LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0
- imagemagick <unfixed>
[buster] - imagemagick <ignored> (Minor issue)
[stretch] - imagemagick <ignored> (Minor issue)
+ [jessie] - imagemagick <ignored> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1495
NOTE: ImageMagick6: https://github.com/ImageMagick/ImageMagick6/commit/aa6a769bd85f6750c26e53e53dcd8a2678745501
TODO: check, potentially only introduced in later versions than present in unstable as LocaleLowercase not present, but check if present before refactoring
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c44636c98920598d1fd13e530a66ba4296d3b8e9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c44636c98920598d1fd13e530a66ba4296d3b8e9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190505/80f7b0d8/attachment.html>
More information about the debian-security-tracker-commits
mailing list