MGASA-2021-0156

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0156.html

Import Source

https://advisories.mageia.org/MGASA-2021-0156.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2021-0156

Related

Published

2021-03-27T14:27:02Z

Modified

2021-06-28T22:19:50Z

Summary

Updated imagemagick packages fix security vulnerabilities

Details

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20241).

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20243).

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVE-2021-20244).

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability (CVe-2021-20246).

Note that abydos, blender, converseen, cuneiform-linux, digikam, kxxstich, libopenshot, pfstools, php-imagick, spectacle, synfig, xine-lib1.2, mgba, windowmaker, zbar and transcode (and tainted conter-parts) have been rebuilt.

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / imagemagick

Package

Name: imagemagick
Purl: pkg:rpm/mageia/imagemagick?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.10.62-1.mga8.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:8 / abydos

Package

Name: abydos
Purl: pkg:rpm/mageia/abydos?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.3-4.1.mga8.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:8 / transcode

Package

Name: transcode
Purl: pkg:rpm/mageia/transcode?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.7-29.1.mga8.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:8 / xine-lib1.2

Package

Name: xine-lib1.2
Purl: pkg:rpm/mageia/xine-lib1.2?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-1.1.mga8.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:8 / imagemagick

Package

Name: imagemagick
Purl: pkg:rpm/mageia/imagemagick?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.10.62-1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / abydos

Package

Name: abydos
Purl: pkg:rpm/mageia/abydos?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.3-4.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / blender

Package

Name: blender
Purl: pkg:rpm/mageia/blender?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.83.10-3.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / converseen

Package

Name: converseen
Purl: pkg:rpm/mageia/converseen?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.9.8.1-4.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / cuneiform-linux

Package

Name: cuneiform-linux
Purl: pkg:rpm/mageia/cuneiform-linux?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.0-18.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / digikam

Package

Name: digikam
Purl: pkg:rpm/mageia/digikam?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.0-4.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / kxstitch

Package

Name: kxstitch
Purl: pkg:rpm/mageia/kxstitch?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.0-4.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / libopenshot

Package

Name: libopenshot
Purl: pkg:rpm/mageia/libopenshot?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.5-5.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / pfstools

Package

Name: pfstools
Purl: pkg:rpm/mageia/pfstools?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-20.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / php-imagick

Package

Name: php-imagick
Purl: pkg:rpm/mageia/php-imagick?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.5-0.git20201230.2.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / pythonmagick

Package

Name: pythonmagick
Purl: pkg:rpm/mageia/pythonmagick?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.9.19-10.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / spectacle

Package

Name: spectacle
Purl: pkg:rpm/mageia/spectacle?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20.12.0-2.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / synfig

Package

Name: synfig
Purl: pkg:rpm/mageia/synfig?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-11.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / xine-lib1.2

Package

Name: xine-lib1.2
Purl: pkg:rpm/mageia/xine-lib1.2?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-1.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / mgba

Package

Name: mgba
Purl: pkg:rpm/mageia/mgba?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.8.4-1.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / windowmaker

Package

Name: windowmaker
Purl: pkg:rpm/mageia/windowmaker?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.95.9-3.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / zbar

Package

Name: zbar
Purl: pkg:rpm/mageia/zbar?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.23.1-5.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / imagemagick

Package

Name: imagemagick
Purl: pkg:rpm/mageia/imagemagick?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.10.62-1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / abydos

Package

Name: abydos
Purl: pkg:rpm/mageia/abydos?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1.3-2.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / blender

Package

Name: blender
Purl: pkg:rpm/mageia/blender?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.79b-14.git20190504.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / converseen

Package

Name: converseen
Purl: pkg:rpm/mageia/converseen?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.9.7.2-2.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / cuneiform-linux

Package

Name: cuneiform-linux
Purl: pkg:rpm/mageia/cuneiform-linux?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.0-15.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / digikam

Package

Name: digikam
Purl: pkg:rpm/mageia/digikam?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.1.0-4.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / kxstitch

Package

Name: kxstitch
Purl: pkg:rpm/mageia/kxstitch?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.1-5.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / libopenshot

Package

Name: libopenshot
Purl: pkg:rpm/mageia/libopenshot?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.4-2.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / pfstools

Package

Name: pfstools
Purl: pkg:rpm/mageia/pfstools?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-13.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / php-imagick

Package

Name: php-imagick
Purl: pkg:rpm/mageia/php-imagick?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.4-1.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / pythonmagick

Package

Name: pythonmagick
Purl: pkg:rpm/mageia/pythonmagick?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.9.19-4.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / spectacle

Package

Name: spectacle
Purl: pkg:rpm/mageia/spectacle?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

19.04.0-1.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / synfig

Package

Name: synfig
Purl: pkg:rpm/mageia/synfig?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / xine-lib1.2

Package

Name: xine-lib1.2
Purl: pkg:rpm/mageia/xine-lib1.2?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.9-9.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / sk1

Package

Name: sk1
Purl: pkg:rpm/mageia/sk1?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0-0.rc3.5.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / uniconvertor

Package

Name: uniconvertor
Purl: pkg:rpm/mageia/uniconvertor?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0-0.1.rc3_20171226.2.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / mgba

Package

Name: mgba
Purl: pkg:rpm/mageia/mgba?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.3-5.2.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / windowmaker

Package

Name: windowmaker
Purl: pkg:rpm/mageia/windowmaker?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.95.8-5.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / zbar

Package

Name: zbar
Purl: pkg:rpm/mageia/zbar?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.23-1.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / imagemagick

Package

Name: imagemagick
Purl: pkg:rpm/mageia/imagemagick?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.10.62-1.mga7.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:7 / abydos

Package

Name: abydos
Purl: pkg:rpm/mageia/abydos?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1.3-2.2.mga7.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:7 / transcode

Package

Name: transcode
Purl: pkg:rpm/mageia/transcode?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.7-23.2.mga7.tainted

Ecosystem specific

{
    "section": "tainted"
}

Mageia:7 / xine-lib1.2

Package

Name: xine-lib1.2
Purl: pkg:rpm/mageia/xine-lib1.2?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.9-9.2.mga7.tainted

Ecosystem specific

{
    "section": "tainted"
}