Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 728
Alerts This Week
Warning Icon 1 728

Ubuntu 22.04 LTS USN-6621-1 Moderate: ImageMagick DoS Threat

ubuntu
Calendar Grey February 1, 2024
Dist Ubuntu Esm H88
Ubuntu 22.04 LTS and several other releases contain a severe security flaw in ImageMagick that could lead to denial of service. Ensure to update immediately to safeguard your system.
ImageMagick could be made to crash if it opened a specially crafted file.

Summary

ImageMagick could be made to crash if it opened a specially crafted

file.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

It was discovered that ImageMagick incorrectly handled certain values when

processing BMP files. An attacker could exploit this to cause a denial of

service.

Topics%20covered

Topics Covered

security advisory denial of service security update ubuntu image processing imagemagick

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS (Available with Ubuntu Pro):
  imagemagick                     8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
  imagemagick-6.q16               8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
  libmagickcore-6.q16-6           8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
  libmagickcore-6.q16-6-extra     8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3

Ubuntu 20.04 LTS (Available with Ubuntu Pro):
  imagemagick                     8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
  imagemagick-6.q16               8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
  libmagickcore-6.q16-6           8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
  libmagickcore-6.q16-6-extra     8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
  imagemagick                     8:6.9.7.4+dfsg-16ubuntu6.15+esm3
  libmagickcore-6.q16-3           8:6.9.7.4+dfsg-16ubuntu6.15+esm3
  libmagickcore-6.q16-3-extra     8:6.9.7.4+dfsg-16ubuntu6.15+esm3

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
  imagemagick                     8:6.8.9.9-7ubuntu5.16+esm10
  imagemagick-6.q16               8:6.8.9.9-7ubuntu5.16+esm10
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.16+esm10
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.16+esm10

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
  imagemagick                     8:6.7.7.10-6ubuntu3.13+esm7
  libmagickcore5                  8:6.7.7.10-6ubuntu3.13+esm7
  libmagickcore5-extra            8:6.7.7.10-6ubuntu3.13+esm7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6621-1

CVE-2023-5341

Ubuntu Security Notice USN-6621-1

Topics%20covered

Topics Covered

security advisory denial of service security update ubuntu image processing imagemagick

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.