USN-5456-1: ImageMagick vulnerability

Packages

imagemagick - Image manipulation programs and library

Details

It was discovered that ImageMagick incorrectly handled memory under
certain circumstances. If a user were tricked into opening a specially
crafted image, an attacker could possibly exploit this issue to cause a
denial of service or other unspecified impact.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
18.04 bionic	imagemagick-6-common – 8:6.9.7.4+dfsg-16ubuntu6.13
	libmagick++-6.q16hdri-7 – 8:6.9.7.4+dfsg-16ubuntu6.13
	imagemagick – 8:6.9.7.4+dfsg-16ubuntu6.13
	libmagickcore-6.q16-3 – 8:6.9.7.4+dfsg-16ubuntu6.13
	imagemagick-common – 8:6.9.7.4+dfsg-16ubuntu6.13
	libmagick++-6.q16-7 – 8:6.9.7.4+dfsg-16ubuntu6.13
	libmagickcore-6.q16hdri-3 – 8:6.9.7.4+dfsg-16ubuntu6.13
16.04 xenial	imagemagick-common – 8:6.8.9.9-7ubuntu5.16+esm3
	imagemagick – 8:6.8.9.9-7ubuntu5.16+esm3
	imagemagick-6.q16 – 8:6.8.9.9-7ubuntu5.16+esm3
	libmagick++-6.q16-5v5 – 8:6.8.9.9-7ubuntu5.16+esm3
	libmagickcore-6.q16-2 – 8:6.8.9.9-7ubuntu5.16+esm3
14.04 trusty	imagemagick-common – 8:6.7.7.10-6ubuntu3.13+esm2
	libmagickcore5 – 8:6.7.7.10-6ubuntu3.13+esm2
	imagemagick – 8:6.7.7.10-6ubuntu3.13+esm2
	libmagick++5 – 8:6.7.7.10-6ubuntu3.13+esm2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2022-28463

CVE-2022-28463

Packages

Details

Update instructions

Reduce your security exposure

References

Related notices