ImageMagick-6.7.2.7-6.0.1.AXS4

エラータID: AXSA:2021-1353:02

Release date: 
Monday, February 1, 2021 - 06:38
Subject: 
ImageMagick-6.7.2.7-6.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

ImageMagick is an image display and manipulation tool for the X Window System
that can read and write multiple image formats.

Security Fix(es):

ImageMagick: Shell injection via PDF password could result in arbitrary code
execution (CVE-2020-29599)

CVE(s):
CVE-2020-29599

Solution: 

Update packages.

CVEs: 
CVE-2020-29599
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
Additional Info: 

N/A

Download: 

SRPMS
  1. ImageMagick-6.7.2.7-6.0.1.AXS4.src.rpm
    MD5: e88c1ac5157913358854872318a8d1d4
    SHA-256: 0f05b8be72caacd133d1cc2df8b78f691d6d014e9518d30dfe0d7564d83dda9e
    Size: 12.06 MB

Asianux Server 4 for x86
  1. ImageMagick-6.7.2.7-6.0.1.AXS4.i686.rpm
    MD5: b1e9d3e2000e592ac87c81587b3f230d
    SHA-256: d7fc1fcd8b03b678094db26264e08c9d87ebbff32fbacf90aa0ade1766d75208
    Size: 1.87 MB
  2. ImageMagick-c++-6.7.2.7-6.0.1.AXS4.i686.rpm
    MD5: 4e984a78513115657b4a5d190ba3c95e
    SHA-256: 5ce4cd44239fe268662fe89e3acc11c5e4e472c1247426a9e7a59886f965deb0
    Size: 144.06 kB

Asianux Server 4 for x86_64
  1. ImageMagick-6.7.2.7-6.0.1.AXS4.x86_64.rpm
    MD5: de688d0f1122dbf2d3c983f909a96f9d
    SHA-256: 5363cbb5011fd63321416680e044195842a948e4d2c492cefca007f6285ba940
    Size: 1.91 MB
  2. ImageMagick-c++-6.7.2.7-6.0.1.AXS4.x86_64.rpm
    MD5: 9929e4592adbf700ff51a0673f177408
    SHA-256: f006a205b8419520c727bd133f2083a6c9052d9ea7dc3d5f9039654ec830688a
    Size: 138.21 kB
  3. ImageMagick-6.7.2.7-6.0.1.AXS4.i686.rpm
    MD5: b1e9d3e2000e592ac87c81587b3f230d
    SHA-256: d7fc1fcd8b03b678094db26264e08c9d87ebbff32fbacf90aa0ade1766d75208
    Size: 1.87 MB