USN-5855-3
USN-5855-3 · imagemagick regression
This page contains facts from public vulnerability sources. Check the original advisory before updating.
USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause ImageMagick to stop responding, resulting in a denial of service, or possibly obtain the contents of arbitrary files by including them into images.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
imagemagick Ubuntu:20.04:LTS
- Versions
- 8:6.9.10.23+dfsg-2.1ubuntu3
- 8:6.9.10.23+dfsg-2.1ubuntu8
- 8:6.9.10.23+dfsg-2.1ubuntu9
- 8:6.9.10.23+dfsg-2.1ubuntu10
- 8:6.9.10.23+dfsg-2.1ubuntu11
- 8:6.9.10.23+dfsg-2.1ubuntu11.1
- 8:6.9.10.23+dfsg-2.1ubuntu11.2
- 8:6.9.10.23+dfsg-2.1ubuntu11.4
- 8:6.9.10.23+dfsg-2.1ubuntu11.5
- 8:6.9.10.23+dfsg-2.1ubuntu11.6
- Affected ranges
- ECOSYSTEM: < 8:6.9.10.23+dfsg-2.1ubuntu11.7
Update to 8:6.9.10.23+dfsg-2.1ubuntu11.7
imagemagick Ubuntu:22.04:LTS
- Versions
- 8:6.9.11.60+dfsg-1ubuntu1
- 8:6.9.11.60+dfsg-1.3
- 8:6.9.11.60+dfsg-1.3build1
- 8:6.9.11.60+dfsg-1.3build2
- 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
- 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2
- Affected ranges
- ECOSYSTEM: < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3
Update to 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3