In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a negative impact to application availability or other problems related to undefined behavior, in cases where ImageMagick processes untrusted input data. The upstream patch introduces functionality to constrain the pixel offsets and prevent these issues. This flaw affects ImageMagick versions prior to 7.0.9-0.
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16-7", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16-7-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16hdri-7", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16hdri-7-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16-3-extra", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16-3-extra-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16hdri-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16hdri-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16hdri-3-extra", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16hdri-3-extra-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16hdri-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16hdri-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.11" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16-8", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16-8-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16hdri-8", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16hdri-8-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16-6", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16-6-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16-6-extra", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16-6-extra-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16hdri-6", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16-6", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16-6-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16hdri-6", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.4" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16-8", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-8", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-8-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-extra", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-6-extra-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16-6", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-6", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-6-dbgsym", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.11.60+dfsg-1ubuntu1" } ], "ubuntu_priority": "low", "availability": "No subscription required" }