Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc8658e9 by Salvatore Bonaccorso at 2019-07-20T15:52:30Z
Add CVE-2019-13453/zipios++
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2558,7 +2558,9 @@ CVE-2019-13454 (ImageMagick 7.0.8-54 Q16 allows Division
by Zero in RemoveDuplic
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1629
NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4
CVE-2019-13453 (Zipios before 0.1.7 does not properly handle certain malformed
zip arc ...)
- TODO: check
+ - zipios++ <unfixed>
+ NOTE: https://sourceforge.net/p/zipios/news/2019/07/version-017-cve-/
+ NOTE: Patch:
https://sourceforge.net/p/zipios/code-git/ci/96e26640573410709bb863b8916a8216f4c6a546/tree/infinite_loop.patch
CVE-2019-13452
RESERVED
CVE-2019-13451
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fc8658e9c2c06786a6f3ccf87c6c5431eca9dae9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fc8658e9c2c06786a6f3ccf87c6c5431eca9dae9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits