[ubuntu/focal-updates] graphicsmagick 1.4+really1.3.35-1ubuntu0.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Mon Mar 27 15:58:09 UTC 2023


graphicsmagick (1.4+really1.3.35-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in ReadMNGImage
    - debian/pacthes/CVE-2020-12672: fix small heap overwrite or assertion if
      magnifying and image to be magnified has rows or columns == 1.
    - CVE-2020-12672
  * SECURITY UPDATE: heap buffer overflow when parsing MIFF files
    - debian/patches/CVE-2022-1270.patch: validate claimed bzip2-compressed
      row length prior to reading data into fixed size buffer. 
    - CVE-2022-1270

Date: 2023-03-21 17:52:08.892476+00:00
Changed-By: Camila Camargo de Matos <camila.camargodematos at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/graphicsmagick/1.4+really1.3.35-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list