Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian LTS: DLA-2173-1 Critical Heap Overflow in GraphicsMagick

debian lts
Calendar Grey April 14, 2020
Dist Debian Esm H88
A security patch for GraphicsMagick on Debian 8 addresses a heap overflow vulnerability in HuffmanDecodeImage caused by signed integer overflow.

A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap overflow in 32-bit applications because of a signed overflow on ...

Topics%20covered

Topics Covered

security advisory debian bug fix heap overflow image processing graphicsmagick

Summary

A vulnerability was discovered in graphicsmagick, a collection of image
processing tools, that results in a heap overflow in 32-bit applications
because of a signed overflow on range check in the HuffmanDecodeImage
function.

For Debian 8 "Jessie", this problem has been fixed in version
1.3.20-3+deb8u10.

We recommend that you upgrade your graphicsmagick packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

<pre><span style="font-family: Courier;">Package : graphicsmagick
Version: 1.3.20-3+deb8u10
CVE ID: CVE-2020-10938

Topics%20covered

Topics Covered

security advisory debian bug fix heap overflow image processing graphicsmagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here