USN-6393-1: ImageMagick vulnerability
21 September 2023
ImageMagick could be made to crash when processing the -help option.
Releases
Packages
- imagemagick - Image manipulation programs and library
Details
It was discovered that ImageMagick did not properly handle memory when
processing the -help option. An attacker could potentially use this
issue to cause a crash.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
-
imagemagick
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1
Available with Ubuntu Pro
-
imagemagick-6.q16hdri
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1
Available with Ubuntu Pro
Ubuntu 18.04
-
imagemagick
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm2
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm2
Available with Ubuntu Pro
-
imagemagick-6.q16hdri
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm2
Available with Ubuntu Pro
Ubuntu 16.04
-
imagemagick
-
8:6.8.9.9-7ubuntu5.16+esm9
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.8.9.9-7ubuntu5.16+esm9
Available with Ubuntu Pro
Ubuntu 14.04
-
imagemagick
-
8:6.7.7.10-6ubuntu3.13+esm6
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.