Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ae0f7ff0 by Sylvain Beucler at 2021-01-11T16:44:28+01:00
CVE-2020-29599/imagemagick: tidy patches
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11916,8 +11916,10 @@ CVE-2020-29599 (ImageMagick before 6.9.11-40 and 7.x
before 7.0.10-40 mishandles
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/20f520ed5c8541ae6646bc38d9d3b480785be6c3
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/a2b3dd8455da2f17849b55e6b6ddcce587e4a323
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/7b0cce080345e5b7ef26d122f18809c93a19a80e
+ NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/875fdf773d6e822364f876bed14c1785a01b45a7
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/ab2e97d2f7520d1d9ff36ef421caf2a899e14ce4
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/869e38717fa91325da87c2a4cedc148a770a07ec
+ NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/226804980651bb4eb5f3ba3b9d7e992f2eda4710
NOTE: ImageMagick6 (bugfix):
https://github.com/ImageMagick/ImageMagick6/commit/83ec5b5b8ee7cae891fff59340be207b513a030d
(6.9.11-41)
NOTE: Issue mitigated by disabling ghostscript handled formats based on
-SAFER insecurity,
NOTE: cf 200-disable-ghostscript-formats.patch in
8:6.9.10.23+dfsg-2.1+deb10u1, but opens
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0f7ff02b487285089f68d4475b437bada4f0e4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0f7ff02b487285089f68d4475b437bada4f0e4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
