ELA-969-1 graphicsmagick security update

out-of-bounds write

2023-09-29
Packagegraphicsmagick
Version1.3.30+hg15796-1~deb9u7 (stretch)
Related CVEs CVE-2020-21679


It was discovered that a buffer overflow in GraphicsMagick, a collection of image processing tools, could result in denial of service or potentially in the execution of arbitrary code when converting crafted images to the PCX format.



For Debian 9 stretch, these problems have been fixed in version 1.3.30+hg15796-1~deb9u7.

We recommend that you upgrade your graphicsmagick packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.