Arch Linux 754 Published by

A imagemagick security update has been released for Arch Linux.



ASA-202006-14: imagemagick: information disclosure


Arch Linux Security Advisory ASA-202006-14
=========================================
Severity: Medium
Date : 2020-06-28
CVE-ID : CVE-2020-13902
Package : imagemagick
Type : information disclosure
Remote : Yes
Link :   https://security.archlinux.org/AVG-1181

Summary
======
The package imagemagick before version 7.0.10.20-1 is vulnerable to
information disclosure.

Resolution
=========
Upgrade to 7.0.10.20-1.

# pacman -Syu "imagemagick>=7.0.10.20-1"

The problem has been fixed upstream in version 7.0.10.20.

Workaround
=========
None.

Description
==========
An out-of-bounds read has been found in the TIFF image decoding part of
imagemagick