QID 671069

Date Published: 2021-11-29

QID 671069: EulerOS Security Update for ImageMagick (EulerOS-SA-2019-2281)

Imagemagick is an image display and manipulation tool for the x window system.
Imagemagick can read and write jpeg, tiff, pnm, gif,and photo cd image formats.
It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one.
Imagemagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more.
Imagemagick is one of your choices if you need a program to manipulate and display images.
If you want to develop your own applications which use imagemagick code or apis, you need to install imagemagick-devel as well.
Security fix(es): imagemagick before 7.0.8-50 has a memory leak vulnerability in the function readpsimage in coders/ps.c.(cve-2019-13137) imagemagick before 7.0.8-50 has a memory leak vulnerability in the function readviffimage in coders/viff.c.(cve-2019-13134) imagemagick before 7.0.8-50 has a memory leak vulnerability in the function readbmpimage in coders/bmp.c.(cve-2019-13133)

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

An arbitrary attacker may exploit this vulnerability to compromise the system.

  • CVSS V3 rated as High - 6.5 severity.
  • CVSS V2 rated as Medium - 4.3 severity.
  • Solution
    The Vendor has released a security update to fix the vulnerability. For more information please visit EulerOS-SA-2019-2281 for updates and patch information

    CVEs related to QID 671069

    Software Advisories
    Advisory ID Software Component Link
    EulerOS-SA-2019-2281 EulerOS V2.0SP8 URL Logo developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2019-2281