tocsin

Debian/imagemagick: unknown

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-

Action: Upgrade imagemagick to 8:7.1.2.31+dfsg1-1 or later.

Affected

introducedfixedlast affected
08:7.1.2.31+dfsg1-1-

Fixed versions

8:7.1.2.31+dfsg1-1

Sources

published · modified · JSON