{"id":"CVE-2016-5118","aliases":["ALPINE-CVE-2016-5118","DEBIAN-CVE-2016-5118","DLA-500-1","DLA-502-1","DSA-3591-1","DSA-3746-1","EUVD-2016-6069","GHSA-6w95-mr48-gp8c","MGASA-2016-0252","MGASA-2016-0257","RHSA-2016:1237","SUSE-SU-2016:1570-1","SUSE-SU-2016:1610-1","SUSE-SU-2016:1614-1","UBUNTU-CVE-2016-5118","USN-2990-1","openSUSE-SU-2024:10040-1","openSUSE-SU-2024:10505-1"],"status":"published","title":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.49982,"percentile":0.98909,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-05-30T00:00:00Z","modified":"2026-10-24T10:30:39Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"imagemagick","fixed_in":["6.9.6.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"imagemagick","fixed_in":["6.9.6.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.3.24-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.8.9.9-7.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.8.9.9-7.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.8.9.9-7.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"imagemagick","fixed_in":["8:6.7.7.10-5+deb7u6"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"graphicsmagick","fixed_in":["1.3.16-1.1+deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"imagemagick","fixed_in":["8:6.8.9.9-5+deb8u3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","fixed_in":["6.8.8.1-25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 5","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager 2.1","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 2.1","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","fixed_in":["6.4.3.6-7.40.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.6.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.6.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u6"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5"]},{"source":"osv","ecosystem":"Debian:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.16-1.1+deb7u2"}]}],"versions":["1.3.16-1.1","1.3.16-1.1+deb7u1"]},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u3"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u2"]},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u2"}]}],"versions":["1.3.20-3+deb8u1"],"bundled":14},{"source":"osv","ecosystem":"Mageia:5","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.24-1.2.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"gnudl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-2.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"octave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-3.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"pdf2djvu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.17-4.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"photoqt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-4.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.5.2-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"converseen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-3.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"cuneiform-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-6.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.91-1.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"k3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0.2-10.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"kcm-grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.8-12.2.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"kxstitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"performous","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.20141015.2.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Image-SubImageFind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-2.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"pfstools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-1.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"pstoedit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.62-5.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"pythonmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"synfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.64.1-6.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"vdr-plugin-skinelchi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-6.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"vdr-plugin-skinenigmang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-8.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.8.9-15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.1"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.1"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.1"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.1"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.1"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.6.6-1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.25-1.1"}]}],"bundled":9}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"graphicsmagick","product":"graphicsmagick"},{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"linux"},{"vendor":"oracle","product":"solaris"},{"vendor":"suse","product":"linux_enterprise_debuginfo"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"linux_enterprise_workstation_extension"},{"vendor":"suse","product":"studio_onsite"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1237","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1035985","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1035984","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/90938","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/30/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2990-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3591","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.397749","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3746","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/29/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Release Notes","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory","advisory"]},{"url":"http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5118","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6w95-mr48-gp8c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-5118","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-5118","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0252.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17714","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/05/01/6","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/02/06/3","tags":["web"]},{"url":"http://lwn.net/Vulnerabilities/677107/","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/05/30/1","tags":["web"]},{"url":"http://www.graphicsmagick.org/NEWS.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0257.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18598","tags":["report"]},{"url":"http://seclists.org/oss-sec/2016/q2/432","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/06/25/3","tags":["web"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/ImageMagick-6/ChangeLog","tags":["web"]},{"url":"https://www.debian.org/security/2016/dsa-3591","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344271","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1237.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8895","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8895","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8897","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q2/459","tags":["article"]},{"url":"http://www.imagemagick.org/discourse-server/viewtopic.php?f=3\u0026t=28466","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8898","tags":["advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/pull/34","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5118","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5239","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5239","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5240","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5240","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/867943","tags":["report"]},{"url":"https://bugzilla.suse.com/982178","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5118","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161610-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161614-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851064","tags":["report"]},{"url":"https://bugzilla.suse.com/965574","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8808","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-5118","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/05/29/7","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2990-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-3714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3718","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2317","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:00:00Z","modified":"2024-08-06T00:53:47.88Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6069","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:00:00Z","modified":"2024-08-06T00:53:47Z","updated_at":"2026-11-03T02:22:43.959327Z"}],"ghsa":[{"id":"GHSA-6w95-mr48-gp8c","title":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2022-05-13T01:29:29Z","modified":"2023-02-01T05:07:54Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:50:38.356016Z"}],"nvd":[{"id":"CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:59:06.737Z","modified":"2026-06-17T00:48:47.32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:26.642445Z"}],"osv":[{"id":"ALPINE-CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:59:06.737Z","modified":"2026-09-22T06:30:21.67140421Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:59:06.737Z","modified":"2026-10-24T10:30:39.25534941Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-06-10T15:59:06.737Z","modified":"2026-09-22T07:01:32.209851936Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-5118","description":"The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","status":"published","published":"2016-05-30T00:00:00Z","modified":"2026-04-22T10:47:53.57139Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DLA-500-1","title":"imagemagick - security update","status":"published","published":"2016-06-01T00:00:00Z","modified":"2026-03-09T02:10:34.871277Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DLA-502-1","title":"graphicsmagick - security update","status":"published","published":"2016-06-02T00:00:00Z","modified":"2026-03-09T02:09:52.555223Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3591-1","title":"imagemagick - security update","status":"published","published":"2016-06-01T00:00:00Z","modified":"2026-03-09T01:19:09.805661Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3746-1","title":"graphicsmagick - security update","status":"published","published":"2016-12-24T00:00:00Z","modified":"2026-03-09T01:19:29.494609Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0252","title":"Updated graphicsmagick packages fix security vulnerability","description":"- A read out-of-bound in the parsing of gif files using GraphicsMagick\n  (CVE-2015-8808).\n\n- Infinite loop caused by converting a circularly defined svg file\n  (CVE-2016-5240).\n\n- Fix another case of CVE-2016-2317 (heap buffer overflow) in the MVG\n  rendering code (also impacts SVG).\n\n- arithmetic exception converting a svg file (CVE-2016-5241)\n\n- Arithmetic exception converting a svg file caused by a X%0 operation in\n  magick/render.c (CVE-2016-2318)\n\n- A shell exploit (CVE-2016-5118) was discovered associated with a\n  filename syntax where file names starting with '|' are intepreted as\n  shell commands executed via popen(). Insufficient sanitization in the\n  SVG and MVG renderers allows such filenames to be passed through from\n  potentially untrusted files. There might be other ways for untrusted\n  inputs to produce such filenames. Due to this issue, support for the\n  feature is removed entirely.\n\nThe gnudl, octave, pdf2djvu, and photoqt packages have been rebuilt to use\nthe updated GraphicsMagick++ library.\n","status":"published","published":"2016-07-14T20:33:59Z","modified":"2026-04-16T06:24:21.615738427Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2016-0257","title":"Updated imagemagick packages fix security vulnerabilities","description":"Updated imagemagick package fixes security vulnerabilities:\n\nThe OpenBlob function in blob.c in ImageMagick allows remote attackers to\nexecute arbitrary code via a | (pipe) character at the start of a filename\n(CVE-2016-5118).\n\nInteger overflow in MagickCore/profile.c (CVE-2016-5841).\n\nBuffer overread in MagickCore/property.c (CVE-2016-5842).\n\nAlso, several packages have been rebuilt to use the updated Magick++-6.Q16\nlibrary.  These include converseen, cuneiform-linux, inkscape, k3d, kcm-grub2,\nkxstitch, performous, perl-Image-SubImageFind, pfstools, pstoedit,\npythonmagick, synfig, vdr-plugin-skinelchi, and vdr-plugin-skinenigmang.\n","status":"published","published":"2016-07-19T12:47:11Z","modified":"2026-04-16T06:24:09.891464887Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10040-1","title":"ImageMagick-6.9.6.6-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-6.9.6.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:50:46.002899Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10505-1","title":"GraphicsMagick-1.3.25-1.1 on GA media","description":"These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:12.679808Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2016:1237","title":"Red Hat Security Advisory: ImageMagick security update","status":"published","published":"2024-09-15T23:30:33Z","modified":"2026-06-26T12:21:51.89997298Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"SUSE-SU-2016:1570-1","title":"Security update for ImageMagick","description":" This update for ImageMagick fixes the following issues:\n\nThis security issue was fixed:\n- CVE-2016-5118: Prevent code execution via popen() (bsc#982178)\n\nThis non-security issue was fixed:\n- Fix encoding of /Title in generated PDFs. (bsc#867943)\n","status":"published","published":"2016-06-14T10:47:44Z","modified":"2026-02-04T03:32:13.238186Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1610-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues: \n\n- CVE-2016-5118: popen() shell vulnerability via filenames (bsc#982178)\n","status":"published","published":"2016-06-17T11:40:44Z","modified":"2026-02-04T03:06:01.076163Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1614-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues: \n\n- CVE-2016-5118: popen() shell vulnerability via special filenames (bnc#982178).\n- CVE-2013-4589: The ExportAlphaQuantumType function in export.c in GraphicsMagick might have allowed remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image (bsc#851064).\n- CVE-2015-8808: Out-of-bound read in the parsing of GIF files (bnc#965574).\n","status":"published","published":"2016-06-17T12:44:45Z","modified":"2026-02-04T02:35:34.85873Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-2990-1","title":"imagemagick vulnerabilities","description":"Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly\nsanitized untrusted input. A remote attacker could use these issues to\nexecute arbitrary code. These issues are known as \"ImageTragick\". This\nupdate disables problematic coders via the /etc/ImageMagick-6/policy.xml\nconfiguration file. In certain environments the coders may need to be\nmanually re-enabled after making sure that ImageMagick does not process\nuntrusted input. (CVE-2016-3714, CVE-2016-3715, CVE-2016-3716,\nCVE-2016-3717, CVE-2016-3718)\n\nBob Friesenhahn discovered that ImageMagick allowed injecting commands via\nan image file or filename. A remote attacker could use this issue to\nexecute arbitrary code. (CVE-2016-5118)\n","status":"published","published":"2016-06-02T13:13:20Z","modified":"2026-04-22T09:25:12.124427Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}