Roberto C. Sánchez pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e21261cf by Roberto C. Sánchez at 2022-11-26T13:18:20-05:00
LTS: mark CVE-2020-10251 as <not-affected> for buster, add notes on
introducing upstream commits
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -198175,9 +198175,12 @@ CVE-2020-10252 (An issue was discovered in ownCloud
before 10.4. Because of an S
- owncloud <removed>
CVE-2020-10251 (In ImageMagick 7.0.9, an out-of-bounds read vulnerability
exists withi ...)
- imagemagick 8:6.9.11.24+dfsg-1 (low; bug #953741)
- [buster] - imagemagick <ignored> (Minor issue)
+ [buster] - imagemagick <not-affected> (Vulnerable code introduced later
with HEIC color profiles support)
[stretch] - imagemagick <not-affected> (Vulnerable code introduced
later with HEIC image format support)
[jessie] - imagemagick <not-affected> (Vulnerable code introduced later
with HEIC image format support)
+ NOTE: introduced by
https://github.com/ImageMagick/ImageMagick6/commit/0a28a9416018661ecc52e908205c738ce5e17e40
+ NOTE: introduced by
https://github.com/ImageMagick/ImageMagick6/commit/8b5a3f92ef102d6f76a51fa20b408795952fc1b0
+ NOTE: introduced by
https://github.com/ImageMagick/ImageMagick6/commit/c6c591c3ec9b043593262a3f3b848355a4804758
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1859
NOTE: ImageMagick:
https://github.com/ImageMagick/ImageMagick/commit/868aad754ee599eb7153b84d610f2ecdf7b339f6
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/3456724dff047db5adb32f8cf70c903c1b7d16d4
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e21261cf7472b3e58339630b676cd521f844f12b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e21261cf7472b3e58339630b676cd521f844f12b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
