Security Information / 2022 / Security Information -- DSA-5288-1 graphicsmagick

Debian Security Advisory

DSA-5288-1 graphicsmagick -- security update

Date Reported:

25 Nov 2022

Affected Packages:

graphicsmagick

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2022-1270.

More information:

It was discovered that a buffer overflow in GraphicsMagick, a collection of image processing tools, could potentially result in the execution of arbitrary code when processing a malformed MIFF image.

For the stable distribution (bullseye), this problem has been fixed in version 1.4+really1.3.36+hg16481-2+deb11u1.

We recommend that you upgrade your graphicsmagick packages.

For the detailed security status of graphicsmagick please refer to its security tracker page at: https://security-tracker.debian.org/tracker/graphicsmagick