Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f80c98e4 by Thorsten Alteholz at 2022-01-27T23:40:31+01:00
Reserve DLA-2902-1 for graphicsmagick
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -123902,7 +123902,6 @@ CVE-2020-12672 (GraphicsMagick through 1.3.35 has a
heap-based buffer overflow i
{DLA-2236-1}
- graphicsmagick 1.4+really1.3.35-2 (bug #960000)
[buster] - graphicsmagick <postponed> (Minor issue; can be fixed along
in future DSA)
- [stretch] - graphicsmagick <postponed> (Minor issue; can be fixed along
in future DSA)
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19025
NOTE: Fixed by:
https://sourceforge.net/p/graphicsmagick/code/ci/50395430a37188d0d197e71bd85ed6dd0f649ee3/
CVE-2020-12671
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Jan 2022] DLA-2902-1 graphicsmagick - security update
+ {CVE-2020-12672}
+ [stretch] - graphicsmagick 1.3.30+hg15796-1~deb9u5
[26 Jan 2022] DLA-2883-2 uriparser - regression update
{CVE-2021-46141}
[stretch] - uriparser 0.8.4-1+deb9u4
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f80c98e4199c8f7372c3ca5f37e3b6e0d7ef7ef7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f80c98e4199c8f7372c3ca5f37e3b6e0d7ef7ef7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
