graphicsmagick:coder_MSL_fuzzer: Global-buffer-overflow in xmlParsePI

Detailed Report: https://oss-fuzz.com/testcase?key=6102648196038656 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMSLfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001920ca2 Crash State: xmlParsePI...

graphicsmagick:coder_MNG_fuzzer: Use-of-uninitialized-value in ReadOnePNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5641595402190848 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in png_handle_eXIf

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6603240378073088 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Mageia: Security Advisory (MGASA-2022-0120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0120 Updated graphicsmagick packages fix security vulnerability

The graphicsmagick package has been updated to version 1.3.38, fixing several security issues and other bugs. See the referenced NEWS link for details...

Updated graphicsmagick packages fix security vulnerability

The graphicsmagick package has been updated to version 1.3.38, fixing several security issues and other bugs. See the referenced NEWS link for details...

PT-2022-37568

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.38 Description The graphicsmagick package has been updated to fix several security issues and other bugs. Recommendations For versions prior to 1.3.38, update to version 1.3.38 to resolve the issue...

CVE-2022-24720

imageprocessing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the apply method from imageprocessing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is...

Design/Logic Flaw

imageprocessing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the apply method from imageprocessing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is...

CVE-2022-24720

imageprocessing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the apply method from imageprocessing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is...

CVE-2022-24720 Improper Input Validation in image_processing

imageprocessing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the apply method from imageprocessing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is...

CVE-2022-24720

CVE-2022-24720 affects the image_processing Ruby gem (wrapper for libvips/ImageMagick/GraphicsMagick). A bug in the #apply method allows executing shell commands when operation sequences come from unsanitized user input. This chain affects Active Storage variants that rely on image_processing. Th...

graphicsmagick:coder_SVG_fuzzer: Use-of-uninitialized-value in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=5033510363070464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderSVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xmlParseInternalSubset...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=5681149173694464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

Debian DLA-2902-1 : graphicsmagick - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2902 advisory. - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c. CVE-2020-12672 Note that Nessus has not tested for this issue but has...

Mageia: Security Advisory (MGASA-2016-0252)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0297)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0115)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0355)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...