| Summary: |
<media-gfx/imagemagick-7.0.8.36: out-of-bounds access in function LocaleLowercase in MagickCore/locale.c leads to SIGSEGV |
| Product: |
Gentoo Security
|
Reporter: |
Agostino Sarubbo <ago> |
| Component: |
Vulnerabilities | Assignee: |
Gentoo Security <security> |
| Status: |
RESOLVED
FIXED
|
|
|
| Severity: |
minor
|
CC: |
graphics+disabled
|
| Priority: |
Normal
|
|
|
| Version: |
unspecified | |
|
| Hardware: |
All | |
|
| OS: |
Linux | |
|
| URL: |
https://bugzilla.redhat.com/show_bug.cgi?id=1695477
|
| Whiteboard: |
B3 [noglsa cve] |
|
Package list:
|
|
Runtime testing required:
|
---
|
|---|
From ${URL} : LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV. Reference: https://github.com/ImageMagick/ImageMagick/issues/1495 Upstream commits: https://github.com/ImageMagick/ImageMagick/commit/07eebcd72f45c8fd7563d3f9ec5d2bed48f65f36 https://github.com/ImageMagick/ImageMagick/commit/58d9c46929ca0828edde34d263700c3a5fe8dc3c https://github.com/ImageMagick/ImageMagick/commit/edc7d3035883ddca8413e4fe7689aa2e579ef04a @security: please check if this issue needs a GLSA.