[Buildroot] [PATCH] package/imagemagick: security bump to version 7.0.8-42

Peter Korsgaard peter at korsgaard.com
Tue Apr 30 11:19:15 UTC 2019


>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > Fixes the following security issues:
 > - CVE-2019-9956: In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer
 >   overflow in the function PopHexPixel of coders/ps.c, which allows an
 >   attacker to cause a denial of service or code execution via a crafted
 >   image file.

 > - CVE-2019-10650: In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer
 >   over-read in the function WriteTIFFImage of coders/tiff.c, which allows an
 >   attacker to cause a denial of service or information disclosure via a
 >   crafted image file.

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list