DEBIAN-CVE-2019-13574

In lib/minimagick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command...

PT-2019-4927

Name of the Vulnerable Software and Affected Versions MiniMagick versions prior to 4.9.4 Description The issue exists due to insufficient input validation in MiniMagick. This allows a remote attacker to execute arbitrary code. In the lib/mini magick/image.rb file, a fetched remote image filename...