Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e4e1232a by Bastien Roucariès at 2024-02-21T12:54:28+00:00
CVE-2022-1114
Tested against poc:
convert-im6.q16: insufficient image data in file `poc' @
error/dcm.c/ReadDCMImage/3313.
convert-im6.q16: no images defined `/dev/null' @
error/convert.c/ConvertImageCommand/3258.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -135127,7 +135127,7 @@ CVE-2022-1115 (A heap-buffer-overflow flaw was found
in ImageMagick\u2019s PushS
CVE-2022-1114 (A heap-use-after-free flaw was found in ImageMagick's
RelinquishDCMInf ...)
- imagemagick 8:6.9.11.60+dfsg-1.5 (bug #1013282)
[bullseye] - imagemagick 8:6.9.11.60+dfsg-1.3+deb11u2
- [buster] - imagemagick <no-dsa> (Minor issue)
+ [buster] - imagemagick <not-affected> (Vulnerable code not present,
bail out early)
[stretch] - imagemagick <not-affected> (Vulnerable code not present)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/4947
NOTE:
https://github.com/ImageMagick/ImageMagick6/commit/78f03b619d08d7c2e0fcaccab407e3ac93c2ee8f
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4e1232aa1a21f8511b8463070273070ce72fc07
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4e1232aa1a21f8511b8463070273070ce72fc07
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
