p PatchFirst

USN-5855-3

USN-5855-3 · imagemagick regression

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause ImageMagick to stop responding, resulting in a denial of service, or possibly obtain the contents of arbitrary files by including them into images.

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • imagemagick Ubuntu:20.04:LTS

    Versions du logiciel
    • 8:6.9.10.23+dfsg-2.1ubuntu3
    • 8:6.9.10.23+dfsg-2.1ubuntu8
    • 8:6.9.10.23+dfsg-2.1ubuntu9
    • 8:6.9.10.23+dfsg-2.1ubuntu10
    • 8:6.9.10.23+dfsg-2.1ubuntu11
    • 8:6.9.10.23+dfsg-2.1ubuntu11.1
    • 8:6.9.10.23+dfsg-2.1ubuntu11.2
    • 8:6.9.10.23+dfsg-2.1ubuntu11.4
    • 8:6.9.10.23+dfsg-2.1ubuntu11.5
    • 8:6.9.10.23+dfsg-2.1ubuntu11.6
    Plages de versions concernées
    • ECOSYSTEM: < 8:6.9.10.23+dfsg-2.1ubuntu11.7

    Mettez à jour vers 8:6.9.10.23+dfsg-2.1ubuntu11.7

  • imagemagick Ubuntu:22.04:LTS

    Versions du logiciel
    • 8:6.9.11.60+dfsg-1ubuntu1
    • 8:6.9.11.60+dfsg-1.3
    • 8:6.9.11.60+dfsg-1.3build1
    • 8:6.9.11.60+dfsg-1.3build2
    • 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
    • 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2
    Plages de versions concernées
    • ECOSYSTEM: < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3

    Mettez à jour vers 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3

Sources originales

Vérifiez votre serveur →