imagemagick vulnerabilities
A security issue affects these releases of Ubuntu and its
derivatives:
* Ubuntu 20.04 LTS
Summary
ImageMagick could be made to crash if it opened a specially
crafted file.
Software Description
* imagemagick - Image manipulation programs and library
Details
It was discovered that ImageMagick incorrectly handled certain
specially crafted image files. If a user or automated system using
ImageMagick were tricked into opening a specially crafted image,
an attacker could exploit this to cause a denial of service or
other unspecified impact. (CVE-2019-19948, CVE-2019-19949)
Update instructions
The problem can be corrected by updating your system to the
following package versions:
Ubuntu 20.04 LTS
imagemagick - 8:6.9.10.23+dfsg-2.1ubuntu11.1
imagemagick-6.q16 - 8:6.9.10.23+dfsg-2.1ubuntu11.1
libmagick++-6.q16-8 - 8:6.9.10.23+dfsg-2.1ubuntu11.1
libmagickcore-6.q16-6 - 8:6.9.10.23+dfsg-2.1ubuntu11.1
To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary
changes.
References
* CVE-2019-19948
* CVE-2019-19949
--- Mystic BBS v1.12 A46 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)