Headline
Debian Security Advisory 5288-1
Debian Linux Security Advisory 5288-1 - It was discovered that a buffer overflow in GraphicsMagick, a collection of image processing tools, could potentially result in the execution of arbitrary code when processing a malformed MIFF image.
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512- -------------------------------------------------------------------------Debian Security Advisory DSA-5288-1 [email protected]://www.debian.org/security/ Moritz MuehlenhoffNovember 25, 2022 https://www.debian.org/security/faq- -------------------------------------------------------------------------Package : graphicsmagickCVE ID : CVE-2022-1270It was discovered that a buffer overflow in GraphicsMagick, a collectionof image processing tools, could potentially result in the execution ofarbitrary code when processing a malformed MIFF image.For the stable distribution (bullseye), this problem has been fixed inversion 1.4+really1.3.36+hg16481-2+deb11u1.We recommend that you upgrade your graphicsmagick packages.For the detailed security status of graphicsmagick please refer toits security tracker page at:https://security-tracker.debian.org/tracker/graphicsmagickFurther information about Debian Security Advisories, how to applythese updates to your system and frequently asked questions can befound at: https://www.debian.org/security/Mailing list: [email protected] PGP SIGNATURE-----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ZQpC-----END PGP SIGNATURE-----Related news
Gentoo Linux Security Advisory 202209-19
Gentoo Linux Security Advisory 202209-19 - Multiple vulnerabilities have been discovered in GraphicsMagick, the worst of which are fuzzing issues presumed to allow for arbitrary code execution. Versions less than 1.3.38 are affected.
CVE-2022-1270: GraphicsMagick / Bugs / #664 [bug]Heap buffer overflow when parsing MIFF
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.