Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a3f90a2a by Salvatore Bonaccorso at 2018-01-05T22:15:26+01:00
Add CVE-2018-5248/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -6,7 +6,10 @@ CVE-2018-5250
CVE-2018-5249 (Cross-site scripting (XSS) vulnerability in Shaarli before
0.8.5 and ...)
- shaarli <itp> (bug #864559)
CVE-2018-5248 (In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer
over-read in ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE: https://github.com/ImageMagick/ImageMagick/issues/927
+ NOTE: ImageMagick-6:
https://github.com/ImageMagick/ImageMagick/commit/c76434c16b5ac8861ee0c5d5c3ab8974fae3d624
+ NOTE:
https://github.com/ImageMagick/ImageMagick/commit/0272305f91763b5ce119a2c7a0e0084d8241a58d
CVE-2018-5247 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in
ReadRLAImage in ...)
TODO: check
CVE-2018-5246 (In ImageMagick 7.0.7-17 Q16, there are memory leaks in
ReadPATTERNImage ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a3f90a2a390e009d6e2b1b7de286f672cb24cda7
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a3f90a2a390e009d6e2b1b7de286f672cb24cda7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
