Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
61dd3e57 by Salvatore Bonaccorso at 2019-10-17T19:59:39Z
Add CVE-2019-17541/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -383,7 +383,11 @@ CVE-2019-17542 (FFmpeg before 4.2 has a heap-based buffer
overflow in vqa_decode
- libav <removed>
NOTE:
https://github.com/FFmpeg/FFmpeg/commit/02f909dc24b1f05cfbba75077c7707b905e63cd2
CVE-2019-17541 (ImageMagick before 7.0.8-55 has a use-after-free in
DestroyStringInfo ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15827
+ NOTE:
https://github.com/ImageMagick/ImageMagick/commit/39f226a9c137f547e12afde972eeba7551124493
+ NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/c1a5aa3f4214ad6e4748de84dad44398959014e1
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/1641
CVE-2019-17540 (ImageMagick before 7.0.8-54 has a heap-based buffer overflow
in ReadPS ...)
TODO: check
CVE-2019-17539 (In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c
allows a NUL ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/61dd3e57776dfcaec6a4396d7e3d8a69cb76755f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/61dd3e57776dfcaec6a4396d7e3d8a69cb76755f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
