Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 835931 (CVE-2021-4219) - <media-gfx/imagemagick-{6.9.12.34,7.1.0.20}: denial of service via svg file opening stdin
Summary: <media-gfx/imagemagick-{6.9.12.34,7.1.0.20}: denial of service via svg file o...
Status: RESOLVED FIXED
Alias: CVE-2021-4219
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://github.com/ImageMagick/ImageM...
Whiteboard: B4 [glsa+]
Keywords:
Depends on: 866431
Blocks:
  Show dependency tree
 
Reported: 2022-03-24 16:33 UTC by John Helmert III
Modified: 2024-05-04 06:15 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-03-24 16:33:09 UTC 
CVE-2021-4219:

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-03-24 18:00:19 UTC 
Oh no, now whissi will forcibly disable reading and writing SVG files forever.
Comment 2 Andreas K. Hüttel archtester gentoo-dev 2022-10-08 22:32:39 UTC 
Is stable.
Comment 3 Larry the Git Cow gentoo-dev 2024-05-04 06:14:09 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=4a7120d937eaaec2a14046c3d00320bd902c32bf

commit 4a7120d937eaaec2a14046c3d00320bd902c32bf
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-05-04 06:13:29 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-05-04 06:14:05 +0000

    [ GLSA 202405-02 ] ImageMagick: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/835931
    Bug: https://bugs.gentoo.org/843833
    Bug: https://bugs.gentoo.org/852947
    Bug: https://bugs.gentoo.org/871954
    Bug: https://bugs.gentoo.org/893526
    Bug: https://bugs.gentoo.org/904357
    Bug: https://bugs.gentoo.org/908082
    Bug: https://bugs.gentoo.org/917594
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202405-02.xml | 74 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 74 insertions(+)