USN-6621-1: ImageMagick vulnerability
1 February 2024
ImageMagick could be made to crash if it opened a specially crafted file.
Releases
Packages
- imagemagick - Image manipulation programs and library
Details
It was discovered that ImageMagick incorrectly handled certain values when
processing BMP files. An attacker could exploit this to cause a denial of
service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
-
imagemagick
-
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Available with Ubuntu Pro
-
libmagickcore-6.q16-6
-
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Available with Ubuntu Pro
-
libmagickcore-6.q16-6-extra
-
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
Available with Ubuntu Pro
Ubuntu 20.04
-
imagemagick
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Available with Ubuntu Pro
-
libmagickcore-6.q16-6
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Available with Ubuntu Pro
-
libmagickcore-6.q16-6-extra
-
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Available with Ubuntu Pro
Ubuntu 18.04
-
imagemagick
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Available with Ubuntu Pro
-
libmagickcore-6.q16-3
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Available with Ubuntu Pro
-
libmagickcore-6.q16-3-extra
-
8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Available with Ubuntu Pro
Ubuntu 16.04
-
imagemagick
-
8:6.8.9.9-7ubuntu5.16+esm10
Available with Ubuntu Pro
-
imagemagick-6.q16
-
8:6.8.9.9-7ubuntu5.16+esm10
Available with Ubuntu Pro
-
libmagickcore-6.q16-2
-
8:6.8.9.9-7ubuntu5.16+esm10
Available with Ubuntu Pro
-
libmagickcore-6.q16-2-extra
-
8:6.8.9.9-7ubuntu5.16+esm10
Available with Ubuntu Pro
Ubuntu 14.04
-
imagemagick
-
8:6.7.7.10-6ubuntu3.13+esm7
Available with Ubuntu Pro
-
libmagickcore5
-
8:6.7.7.10-6ubuntu3.13+esm7
Available with Ubuntu Pro
-
libmagickcore5-extra
-
8:6.7.7.10-6ubuntu3.13+esm7
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.