First published: Tue Dec 03 2019(Updated: )
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/graphicsmagick | <1.3.28-2ubuntu0.1 | 1.3.28-2ubuntu0.1 |
=18.04 | ||
All of | ||
ubuntu/libgraphicsmagick++-q16-12 | <1.3.28-2ubuntu0.1 | 1.3.28-2ubuntu0.1 |
=18.04 | ||
All of | ||
ubuntu/libgraphicsmagick-q16-3 | <1.3.28-2ubuntu0.1 | 1.3.28-2ubuntu0.1 |
=18.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The vulnerability ID for these GraphicsMagick vulnerabilities is CVE-2018-20184, CVE-2018-20185, and CVE-2018-20189.
These vulnerabilities could potentially allow an attacker to cause a denial of service or other unspecified impact on your system.
GraphicsMagick versions up to and including 1.3.28-2ubuntu0.1, libgraphicsmagick++-q16-12 versions up to and including 1.3.28-2ubuntu0.1, and libgraphicsmagick-q16-3 versions up to and including 1.3.28-2ubuntu0.1 on Ubuntu 18.04 are affected.
To fix these vulnerabilities, you should update GraphicsMagick, libgraphicsmagick++-q16-12, and libgraphicsmagick-q16-3 to version 1.3.28-2ubuntu0.1 or later.
You can find more information about these vulnerabilities on the Ubuntu security advisories: CVE-2018-20184 (https://ubuntu.com/security/CVE-2018-20184), CVE-2018-20185 (https://ubuntu.com/security/CVE-2018-20185), and CVE-2018-20189 (https://ubuntu.com/security/CVE-2018-20189).