Skip to content
OpenAdvisories
Medium ALAS2023-2023-320 1 CVE

Moderate: ImageMagick security update (Amazon Linux 2023)

Published Aug 31, 2023 · Updated Sep 7, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39978: ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2023 ImageMagick 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-c++ 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-c++-debuginfo 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-c++-devel 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-debuginfo 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-debugsource 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-devel 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-doc 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-libs 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-libs-debuginfo 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-perl 1:6.9.12.82-1.amzn2023.0.6
Amazon Linux · 2023 ImageMagick-perl-debuginfo 1:6.9.12.82-1.amzn2023.0.6

Vulnerabilities 1

  • Unscored —
    CVE-2023-39978

    ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

    imagemagick Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-39978.html