Updated imagemagick packages fix security vulnerability

2023-05-0621:19:07

Gentoo Foundation

advisories.mageia.org

imagemagick

packages

security vulnerability

heap-based buffer overflow

denial of service

unix

0.001 Low

EPSS

Percentile

22.8%

JSON

A heap-based buffer overflow issue was discovered in ImageMagick’s ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service. (CVE-2023-1906)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchimagemagick< 7.1.0.62-1.1imagemagick-7.1.0.62-1.1.mga8
Mageia8noarchimagemagick< 7.1.0.62-1.1imagemagick-7.1.0.62-1.1.mga8.tainted