{"id":"USN-3142-2","aliases":[],"status":"published","title":"imagemagick regression","description":"USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes\nintroduced a regression with text labels and a regression with the text\ncoder. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that ImageMagick incorrectly handled certain malformed\n image files. If a user or automated system using ImageMagick were tricked\n into opening a specially crafted image, an attacker could exploit this to\n cause a denial of service or possibly execute code with the privileges of\n the user invoking the program.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-02-22T19:59:54Z","modified":"2026-04-22T09:29:52Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.4"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.4"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3142-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1589580","tags":["report"]},{"url":"https://launchpad.net/bugs/1646485","tags":["report"]}],"sources":{"osv":[{"id":"USN-3142-2","title":"imagemagick regression","description":"USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes\nintroduced a regression with text labels and a regression with the text\ncoder. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that ImageMagick incorrectly handled certain malformed\n image files. If a user or automated system using ImageMagick were tricked\n into opening a specially crafted image, an attacker could exploit this to\n cause a denial of service or possibly execute code with the privileges of\n the user invoking the program.\n","status":"published","published":"2017-02-22T19:59:54Z","modified":"2026-04-22T09:29:52.151969Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}