Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5341: A vulnerability was found in ImageMagick where heap use-after-free was found in coders/bmp.c. CVE-2021-20309: A flaw was found in ImageMagick, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | ImageMagick | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-c++ | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-c++-debuginfo | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-c++-devel | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-debuginfo | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-debugsource | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-devel | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-doc | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-libs | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-libs-debuginfo | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-perl | 1:6.9.12.82-1.amzn2023.0.7 |
| Amazon Linux · 2023 | ImageMagick-perl-debuginfo | 1:6.9.12.82-1.amzn2023.0.7 |
Vulnerabilities 2
-
Medium 6.2
Imagemagick: heap use-after-free in coders/bmp.c
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of…