Source: graphicsmagick Version: 1.4+really1.3.48-1 X-Debbugs-CC: [email protected] Severity: important Tags: security upstream
Hi, The following vulnerability was published for graphicsmagick. CVE-2026-103118[0]: | A vulnerability was detected in GraphicsMagick up to 1.3.47. | Affected by this vulnerability is the function ExtractPostscript of | the file coders/wpg.c of the component WPG File Handler. Performing | a manipulation results in uncontrolled recursion. The attack may be | initiated remotely. The patch is named 627b5b1b2fc2. It is suggested | to install a patch to address this issue. The vendor was contacted | early, responded in a very professional manner and quickly released | a fixed version of the affected product. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-103118 https://www.cve.org/CVERecord?id=CVE-2026-103118 [1] https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/627b5b1b2fc2873550fde7777c9796ad001f89cc Please adjust the affected versions in the BTS as needed. Regards, Salvatore
