Summary
[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]
[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.9.10.68-7.0.3.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.9.10.68-7.0.3.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.9.10.68-7.0.3.el7_9 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.9.10.68-7.0.3.el7_9 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.9.10.68-7.0.3.el7_9 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.9.10.68-7.0.3.el7_9 |
Vulnerabilities 1
-
High 7.5
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_p…