GHSA-8JVJ-P28H-9GM7 ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy

ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, a policy rule such as /etc/ can be bypassed by a path traversal. The OS resolves the traversal and opens the sensitive file, but the policy matcher only sees the unnormalized...

xfs: don't walk off the end of a directory data block

...