data/CVE/list

@@ -49,15 +49,17 @@ CVE-2019-13299 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at Ma
 CVE-2019-13298 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCor ...)
 	TODO: check
 CVE-2019-13297 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCo ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (bug #931455)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1609
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/35c7032723d85eee7318ff6c82f031fa2666b773
 	NOTE: Some older version before the fixing commit did as well not check for
-	NOTE: width size.
+	NOTE: width size (cf. CVE-2019-13295).
 CVE-2019-13296 (ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemor ...)
 	TODO: check
 CVE-2019-13295 (ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCo ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1608
+	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/55e6dc49f1a381d9d511ee2f888fdc3e3c3e3953
 CVE-2019-13294 (AROX School-ERP Pro has a command execution vulnerability. import_stud ...)
 	NOT-FOR-US: AROX School-ERP Pro
 CVE-2019-13293