[Git][security-tracker-team/security-tracker][master] Adjust commits for CVE-2020-27776 according to report back from upstream
Salvatore Bonaccorso
carnil at debian.org
Mon Dec 14 20:21:00 GMT 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
92e0bf4b by Salvatore Bonaccorso at 2020-12-14T21:20:14+01:00
Adjust commits for CVE-2020-27776 according to report back from upstream
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9484,9 +9484,8 @@ CVE-2020-27776 (A flaw was found in ImageMagick in MagickCore/statistic.c. An at
[buster] - imagemagick <ignored> (Minor issue)
[stretch] - imagemagick <ignored> (Minor issue, UBSAN shift exponent warning)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1736
- NOTE: ImageMagick: https://github.com/ImageMagick/ImageMagick/commit/29cee9152d1b5487cfd19443ca48935eea0cabe2
- NOTE: ImageMagick6: https://github.com/ImageMagick/ImageMagick6/commit/052175e4b190598141fbcc64641cd5ee4db3602d
- NOTE: Same fix as for CVE-2020-27774.
+ NOTE: ImageMagick: https://github.com/ImageMagick/ImageMagick/commit/0c92913ec5705300943703f1795f34c0cc25164e
+ NOTE: ImageMagick6: https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5
CVE-2020-27775 (A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker w ...)
- imagemagick 8:6.9.11.24+dfsg-1
[buster] - imagemagick <ignored> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92e0bf4b6cff7bf690a0d66d816294c9f161e22a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92e0bf4b6cff7bf690a0d66d816294c9f161e22a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201214/fd1cb5e2/attachment.html>
More information about the debian-security-tracker-commits
mailing list