Alerts This Week
Warning Icon 1 848
Alerts This Week
Warning Icon 1 848

Mageia 9: 2025-0132 critical graphicsmagick update for CVE-2025-27795

mageia
Calendar Grey April 12, 2025
Dist Mageia Esm H88
Mageia 9 enhances GraphicsMagick to resolve significant image dimension issues. This update addresses vulnerabilities identified as CVE-2025-27795.
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits

Summary

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. (CVE-2025-27795)

References

- https://bugs.mageia.org/show_bug.cgi?id=34163

- https://lwn.net/Articles/1016352/

- https://www.cve.org/CVERecord?id=CVE-2025-27795

Resolution

SRPMS

- 9/core/graphicsmagick-1.3.40-1.1.mga9

- 9/tainted/graphicsmagick-1.3.40-1.1.mga9.tainted

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Apr 2025
URL: https://advisories.mageia.org/MGASA-2025-0132.html
Type: security
CVE: CVE-2025-27795

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here