Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1136432 > unrolled thread

Bug#1021141: imagemagick: CVE-2022-3213

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1021141: imagemagick: CVE-2022-3213 Jeremy Bícha <jeremy.bicha@canonical.com> - 2023-02-05 12:50 +0100

#1136432 — Bug#1021141: imagemagick: CVE-2022-3213

Hi,

The upstream commit for https://ubuntu.com/security/CVE-2022-3213
doesn't apply cleanly.

https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb364

Ubuntu says "code not present" for Jammy (and Jammy is basically the
same version as Debian Unstable/Testing).

Please also check https://security-tracker.debian.org/tracker/CVE-2022-1115
(originally mentioned at https://bugs.debian.org/1013282) where Ubuntu
also says "code not present"  and the commit does not apply cleanly.

Thank you,
Jeremy Bícha

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web