Hugo Lefeuvre pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
659d3789 by Hugo Lefeuvre at 2019-08-13T11:24:50Z
CVE-2019-13304/imagemagick: additional commit link
Similar one-byte buffer overflow, bundled in CVE-2019-13304.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5451,8 +5451,8 @@ CVE-2019-13391 (In ImageMagick 7.0.8-50 Q16,
ComplexImages in MagickCore/fourier
- imagemagick <unfixed> (bug #931633)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1588
NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/f6ffc702c6eecd963587273a429dcd608c648984
- NOTE: Patch is insufficient, and most likely broken. It is partly
reverted by
- NOTE: the CVE-2019-13308 patch, which seems to be the actual patch for
this issue.
+ NOTE: Patch is insufficient, partly reverted by the CVE-2019-13308 patch
+ NOTE: which seems to be the actual patch for this issue.
CVE-2019-13390 (In FFmpeg 4.1.3, there is a division by zero at
adx_write_trailer in l ...)
- ffmpeg <unfixed> (low; bug #932535)
[buster] - ffmpeg <postponed> (Minor issue, wait until fixed in 4.1.x
branch)
@@ -5676,6 +5676,7 @@ CVE-2019-13304 (ImageMagick 7.0.8-50 Q16 has a
stack-based buffer overflow at co
- imagemagick <unfixed> (bug #931453)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1614
NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/bfa3b9610c83227894c92b0d312ad327fceb6241
+ NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/a2f84f23d064e98f423aa0d050ff98838cf0a1b1
CVE-2019-13303 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in
MagickCo ...)
- imagemagick <not-affected> (Only affects Imagemagick 7)
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/d29148fae06c01ef215940e084cf41853c117bab
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/659d37899e12712638b6918d3bf8e6a384f397f4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/659d37899e12712638b6918d3bf8e6a384f397f4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
