[Git][security-tracker-team/security-tracker][master] Add CVE-2023-34151/imagemagick

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
708fd493 by Salvatore Bonaccorso at 2023-05-30T08:25:54+02:00
Add CVE-2023-34151/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -77071,6 +77071,11 @@ CVE-2022-32547 (In ImageMagick, there is load of misaligned address for type 'do
 	NOTE: https://github.com/ImageMagick/ImageMagick/pull/5034
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/eac8ce4d873f28bb6a46aa3a662fb196b49b95d0 (7.1.0-30)
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/dc070da861a015d3c97488fdcca6063b44d47a7b (6.9.12-45)
+CVE-2023-34151 [Undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546)]
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/6341
+	NOTE: ImageMagick: https://github.com/ImageMagick/ImageMagick/commit/3d6d98d8a2be30d74172ab43b5b8e874d2deb158 (7.1.1-10)
+	NOTE: ImageMagick6: https://github.com/ImageMagick/ImageMagick6/commit/133089f716f23ce0b80d89ccc1fd680960235512 (6.9.12-88)
 CVE-2022-32546 (A vulnerability was found in ImageMagick, causing an outside the range ...)
 	{DLA-3429-1}
 	- imagemagick 8:6.9.11.60+dfsg-1.5 (bug #1016442)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/708fd4936363ef1fd94322bfa1308875616474be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/708fd4936363ef1fd94322bfa1308875616474be
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230530/eb6be555/attachment.htm>