Description
ImageMagick: Policy Bypass in concatenate operation due to missing checks
The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =8:6.9.11.60+dfsg-1.3 || =8:6.9.11.60+dfsg-1.3+deb11u1 || =8:6.9.11.60+dfsg-1.3+deb11u10 || =8:6.9.11.60+dfsg-1.3+deb11u11 || =8:6.9.11.60+dfsg-1.3+deb11u12 || =8:6.9.11.60+dfsg-1.3+deb11u13 || =8:6.9.11.60+dfsg-1.3+deb11u14 || =8:6.9.11.60+dfsg-1.3+deb11u2 || =8:6.9.11.60+dfsg-1.3+deb11u3 || =8:6.9.11.60+dfsg-1.3+deb11u4 || =8:6.9.11.60+dfsg-1.3+deb11u5 || =8:6.9.11.60+dfsg-1.3+deb11u6 || =8:6.9.11.60+dfsg-1.3+deb11u7 || =8:6.9.11.60+dfsg-1.3+deb11u8 || =8:6.9.11.60+dfsg-1.3+deb11u9 || >=0 <8:6.9.11.60+dfsg-1.3+deb11u15 | 8:6.9.11.60+dfsg-1.3+deb11u15 |
 debian 12 | | =8:6.9.11.60+dfsg-1.6 || =8:6.9.11.60+dfsg-1.6+deb12u1 || =8:6.9.11.60+dfsg-1.6+deb12u10 || =8:6.9.11.60+dfsg-1.6+deb12u11 || =8:6.9.11.60+dfsg-1.6+deb12u2 || =8:6.9.11.60+dfsg-1.6+deb12u3 || =8:6.9.11.60+dfsg-1.6+deb12u4 || =8:6.9.11.60+dfsg-1.6+deb12u5 || =8:6.9.11.60+dfsg-1.6+deb12u6 || =8:6.9.11.60+dfsg-1.6+deb12u7 || =8:6.9.11.60+dfsg-1.6+deb12u8 || =8:6.9.11.60+dfsg-1.6+deb12u9 || >=0 <8:6.9.11.60+dfsg-1.6+deb12u12 | 8:6.9.11.60+dfsg-1.6+deb12u12 |
 debian 13 | | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.43+dfsg1-1+deb13u1 || =8:7.1.1.43+dfsg1-1+deb13u10 || =8:7.1.1.43+dfsg1-1+deb13u2 || =8:7.1.1.43+dfsg1-1+deb13u3 || =8:7.1.1.43+dfsg1-1+deb13u4 || =8:7.1.1.43+dfsg1-1+deb13u5 || =8:7.1.1.43+dfsg1-1+deb13u6 || =8:7.1.1.43+dfsg1-1+deb13u7 || =8:7.1.1.43+dfsg1-1+deb13u8 || =8:7.1.1.43+dfsg1-1+deb13u9 || >=0 <8:7.1.1.43+dfsg1-1+deb13u11 | 8:7.1.1.43+dfsg1-1+deb13u11 |
 debian 14 | | =8:7.1.1.43+dfsg1-1 || =8:7.1.1.46+dfsg1-1 || =8:7.1.1.47+dfsg1-1 || =8:7.1.1.47+dfsg1-2 || =8:7.1.2.1+dfsg1-1 || =8:7.1.2.12+dfsg1-1 || =8:7.1.2.13+dfsg1-1 || =8:7.1.2.15+dfsg1-1 || =8:7.1.2.15+dfsg1-2 || =8:7.1.2.16+dfsg1-1 || =8:7.1.2.18+dfsg1-1 || =8:7.1.2.19+dfsg1-1 || =8:7.1.2.21+dfsg1-1 || =8:7.1.2.23+dfsg1-1 || =8:7.1.2.24+dfsg1-1 || =8:7.1.2.25+dfsg1-1 || =8:7.1.2.25+dfsg1-2 || =8:7.1.2.3+dfsg1-1 || =8:7.1.2.7+dfsg1-1 || =8:7.1.2.8+dfsg1-1 || >=0 <8:7.1.2.26+dfsg1-1 | 8:7.1.2.26+dfsg1-1 |
 rpm rhel6 | | - | - |
 rpm rhel7 | | - | - |
 nuget | | | 14.15.0 |
 nuget | | | 14.15.0 |
 nuget | | | 14.15.0 |
 nuget | | | 14.15.0 |