[Bug 2004580] Re: Possible arbitrary file leak
Greg Whiteley
2004580 at bugs.launchpad.net
Sun Mar 26 05:07:28 UTC 2023
On focal the patch for this (or the repackaging thereof) in
8:6.9.10.23+dfsg-2.1ubuntu11.6 seems to cause gsfonts not to be found -
logged as #2012684
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/2004580
Title:
Possible arbitrary file leak
Status in imagemagick package in Ubuntu:
Fix Released
Bug description:
More details can be found here:
https://www.metabaseq.com/imagemagick-zero-days/
Affected versions:
Injection via "-authenticate"
- ImageMagick 6: 6.9.8-1 up to 6.9.11-40
Explotation via MSL:
-ImageMagick 6: 6.9.11-35 up to 6.9.11-40
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/2004580/+subscriptions
More information about the foundations-bugs
mailing list