Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2021:0007
Issued: 2021-01-06
Updated: 2021-01-06
Summary
ImageMagick security update
Severity
Important
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2020-29599:
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
References
Updated Packages
- aarch64
- ImageMagick-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-c++-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-c++-devel-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-debuginfo-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-devel-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-doc-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- ImageMagick-perl-6.9.10.68-5.1.al7.aarch64.rpm → (download)
- i686
- ImageMagick-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-c++-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-c++-devel-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-debuginfo-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-devel-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-doc-6.9.10.68-5.1.al7.i686.rpm → (download)
- ImageMagick-perl-6.9.10.68-5.1.al7.i686.rpm → (download)
- src
- ImageMagick-6.9.10.68-5.1.al7.src.rpm → (download)
- x86_64
- ImageMagick-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-c++-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-c++-devel-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-debuginfo-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-devel-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-doc-6.9.10.68-5.1.al7.x86_64.rpm → (download)
- ImageMagick-perl-6.9.10.68-5.1.al7.x86_64.rpm → (download)