Updated graphicsmagick packages fix security vulnerabilities
Publication date: 05 May 2025Modification date: 05 May 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-32460
Description
GraphicsMagick before 8e56520 has a heap-based buffer over-read in
ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
(CVE-2025-32460)
References
- https://bugs.mageia.org/show_bug.cgi?id=34218
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6QYCKFE7IU3HOGGUF42EURRWALAXSG4Z/
- https://lists.debian.org/debian-security-announce/2025/msg00067.html
- https://lists.suse.com/pipermail/sle-updates/2025-April/039065.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32460
SRPMS
9/core
- graphicsmagick-1.3.40-1.2.mga9
9/tainted
- graphicsmagick-1.3.40-1.2.mga9.tainted