Bug 25790

Summary:	php-imagick new security issue CVE-2019-11037
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Marc Krämer <mageia>
Status:	RESOLVED INVALID	QA Contact:	Sec team <security>
Severity:	critical
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7TOO
Source RPM:	php-imagick-3.4.4-2.mga8.src.rpm	CVE:
Status comment:

Description David Walser 2019-11-30 16:06:34 CET

Debian has issued an advisory on November 25:
https://www.debian.org/security/2019/dsa-4576

Mageia 7 is also affected.

David Walser 2019-11-30 16:06:45 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Lewis Smith 2019-12-01 21:05:27 CET

Assigning to Marc as the active maintainer.

Assignee: bugsquad => mageia

Comment 2 Marc Krämer 2019-12-02 00:09:59 CET

we are not affected. This issue is fixed in 3.4.4; what we currently run.
This issue was adressed bug #77791 in the changelog.

Status: NEW => RESOLVED
Resolution: (none) => INVALID