Bug 25790 - php-imagick new security issue CVE-2019-11037
Summary: php-imagick new security issue CVE-2019-11037
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: Marc Krämer
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2019-11-30 16:06 CET by David Walser
Modified: 2019-12-02 00:09 CET (History)
0 users

See Also:
Source RPM: php-imagick-3.4.4-2.mga8.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-11-30 16:06:34 CET 
Debian has issued an advisory on November 25:
https://www.debian.org/security/2019/dsa-4576

Mageia 7 is also affected.
David Walser 2019-11-30 16:06:45 CET

Whiteboard: (none) => MGA7TOO

Comment 1 Lewis Smith 2019-12-01 21:05:27 CET 
Assigning to Marc as the active maintainer.

Assignee: bugsquad => mageia

Comment 2 Marc Krämer 2019-12-02 00:09:59 CET 
we are not affected. This issue is fixed in 3.4.4; what we currently run.
This issue was adressed bug #77791 in the changelog.

Status: NEW => RESOLVED
Resolution: (none) => INVALID
Note You need to log in before you can comment on or make changes to this bug.