Linux · Ubuntu · Package update · August 22, 2023

libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.14: libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.14 for Ubuntu 18.04.6 LTS (bionic)

libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.14, released August 22, 2023, fixes 7 CVEs in libmagickcore-6-headers. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0142
73rd percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 4 Routine 3

Fixed package versions

ProductReleaseFixed in
libmagickcore-6-headersUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.14

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-32546 imagemagick-6.q16hdri: A vulnerability was found in ImageMagick, causing an outside the range ofrepresentable values of type 'unsigned long'...7.8 0.0142 None reported
High CVE-2022-32545 imagemagick: A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char...7.8 0.0141 None reported
High CVE-2022-32547 libmagickcore-6.q16-6-extra: In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type '...7.8 0.0141 None reported
High CVE-2021-40211 imagemagick: An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.7.5 0.0095 None reported
Routine CVE-2021-20241 libmagickcore-6.q16hdri-7t64: A flaw was found in ImageMagick in coders/jp2.cn/a 0.0112 None reported
Routine CVE-2021-20243 imagemagick: A flaw was found in ImageMagick in MagickCore/resize.cn/a 0.0107 None reported
Routine CVE-2021-20224 imagemagick: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c5.5 0.0039 None reported
Showing 1 to 7 of 7 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.