Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2361996d by Salvatore Bonaccorso at 2019-03-30T20:17:40Z
Add CVE-2019-10649/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27,7 +27,10 @@ CVE-2019-10651
CVE-2019-10650 (In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer
over-read in ...)
TODO: check
CVE-2019-10649 (In ImageMagick 7.0.8-36 Q16, there is a memory leak in the
function SV ...)
- TODO: check
+ - imagemagick <unfixed> (unimportant)
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/1533
+ NOTE:
https://github.com/ImageMagick/ImageMagick/commit/d3ae9c19125c8704b4866381f7a064ca2cbdc006
+ NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/e3417aebe17cbe274b7361aa92c83226ca5b646b
CVE-2019-10648 (Robocode through 1.9.3.5 allows remote attackers to cause
external ser ...)
TODO: check
CVE-2019-10647 (ZZZCMS zzzphp v1.6.3 allows remote attackers to execute
arbitrary PHP ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2361996d8baafa4b9a7c55fff9232cf59971142e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2361996d8baafa4b9a7c55fff9232cf59971142e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
