{"id":"CVE-2019-10131","aliases":["DEBIAN-CVE-2019-10131","DLA-2333-1","EUVD-2019-2173","GHSA-fhcf-vpm9-jphv","RHSA-2020:1180","SUSE-SU-2019:1712-1","UBUNTU-CVE-2019-10131","USN-4034-1","USN-6985-1"],"status":"published","title":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01254,"percentile":0.69681,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-193"],"published":"2019-04-30T00:00:00Z","modified":"2026-10-24T14:20:21Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.10.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u9"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8"],"bundled":24},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"autotrace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.31.1-38.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.3-23.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"inkscape-view","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.92.2-3.el7"}]}],"bundled":82},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.123.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm9"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.14"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.14"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm9"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8"],"bundled":11}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10131","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/cb1214c124e1bd61f7dd551b94a794864861592e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/108117","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00051.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4034-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10131","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fhcf-vpm9-jphv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-10131","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1180","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1532845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1764595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801681","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1180.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18271","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18273","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18273","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000476","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000476","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14436","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7397","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7398","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10131","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11472","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11598","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13297","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13311","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13311","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13454","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16708","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16713","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19949","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191712-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133204","tags":["report"]},{"url":"https://bugzilla.suse.com/1133205","tags":["report"]},{"url":"https://bugzilla.suse.com/1133498","tags":["report"]},{"url":"https://bugzilla.suse.com/1133501","tags":["report"]},{"url":"https://bugzilla.suse.com/1134075","tags":["report"]},{"url":"https://bugzilla.suse.com/1135232","tags":["report"]},{"url":"https://bugzilla.suse.com/1135236","tags":["report"]},{"url":"https://bugzilla.suse.com/1136183","tags":["report"]},{"url":"https://bugzilla.suse.com/1136732","tags":["report"]},{"url":"https://bugzilla.suse.com/1138425","tags":["report"]},{"url":"https://bugzilla.suse.com/1138464","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11598","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-10131","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4034-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6985-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-12805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16412","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16413","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-10650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12979","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-10131","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T18:01:57Z","modified":"2024-08-04T22:10:10.025Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2019-2173","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T18:01:57Z","modified":"2024-08-04T22:10:10Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T02:40:53.61807Z"}],"ghsa":[{"id":"GHSA-fhcf-vpm9-jphv","title":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2022-05-24T16:44:54Z","modified":"2023-01-28T05:04:59Z","cwes":["CWE-119","CWE-193"],"updated_at":"2026-11-02T14:44:17.062669Z"}],"nvd":[{"id":"CVE-2019-10131","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T19:29:03.717Z","modified":"2026-06-17T02:10:18.173Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:05:12.471695Z"}],"osv":[{"id":"CVE-2019-10131","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T19:29:03.717Z","modified":"2026-10-24T14:20:21.658383767Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2019-10131","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T19:29:03.717Z","modified":"2026-09-21T07:00:49.52438628Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"RHSA-2020:1180","title":"Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:13:45Z","modified":"2026-06-27T10:09:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-10131","description":"An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.","status":"published","published":"2019-04-30T00:00:00Z","modified":"2026-04-22T12:05:30.974551Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-2333-1","title":"imagemagick - security update","status":"published","published":"2020-08-18T00:00:00Z","modified":"2026-03-09T01:21:30.213896Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"SUSE-SU-2019:1712-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage() (bsc#1138464).\n- Fixed a file content disclosure via SVG and WMF decoding (bsc#1138425).- CVE-2019-11472: Fixed a denial of service in ReadXWDImage() (bsc#1133204).\n- CVE-2019-11470: Fixed a denial of service in ReadCINImage() (bsc#1133205).\n- CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498).\n- CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501).\n- CVE-2019-10131: Fixed a off-by-one read in formatIPTCfromBuffer function in coders/meta.c (bsc#1134075).\n- CVE-2017-12806: Fixed a denial of service through memory exhaustion in format8BIM() (bsc#1135232).\n- CVE-2017-12805: Fixed a denial of service through memory exhaustion in ReadTIFFImage() (bsc#1135236).\n- CVE-2019-11598: Fixed a heap-based buffer over-read in WritePNMImage() (bsc#1136732)\n    \nWe also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)\n","status":"published","published":"2019-06-25T15:35:38Z","modified":"2026-02-04T02:14:02.031872Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-4034-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n\nDue to a large number of issues discovered in GhostScript that prevent it\nfrom being used by ImageMagick safely, the update for Ubuntu 18.10 and\nUbuntu 19.04 includes a default policy change that disables support for the\nPostscript and PDF formats in ImageMagick. This policy can be overridden if\nnecessary by using an alternate ImageMagick policy configuration.\n","status":"published","published":"2019-06-25T11:26:41Z","modified":"2026-04-27T15:33:04.180020094Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-6985-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or execute code with the privileges of the user \ninvoking the program.\n","status":"published","published":"2024-09-04T12:58:54Z","modified":"2026-06-29T13:51:16.053884056Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}