ImageMagick
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by The Hacker NewsCritical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
- Vulnerability reported by Ubuntu Security NoticesUbuntu USN-8994-1 fixes nine libvips vulnerabilities in image processing
Recent news
Critical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
A critical unauthenticated file-write flaw affects Ruby on Rails apps that process uploads through Active Storage with ImageMagick. A crafted upload can write arbitrary files on the server. The Rails project has fixed it in versions 8.1.4.1 and 8.0.5.2.
Ubuntu USN-8994-1 fixes nine libvips vulnerabilities in image processing
Ubuntu notice USN-8994-1 covers nine libvips vulnerabilities, mostly integer overflows and improper validation when parsing PDF, TIFF, GIF, PPM, Radiance and EXIF data. Most could cause a crash and denial of service, some could expose sensitive information, and several could allow arbitrary code execution. Affected releases range from Ubuntu 16.04 LTS to 26.04 LTS depending on the flaw.