PublicDateAtUSN: 2018-07-04 Candidate: CVE-2018-13153 PublicDate: 2018-07-05 02:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13153 https://ubuntu.com/security/notices/USN-3711-1 Description: In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. Ubuntu-Description: Notes: Bugs: https://github.com/ImageMagick/ImageMagick/issues/1195 Priority: low Discovered-by: Assigned-to: mdeslaur CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [6.5 MEDIUM] Patches_imagemagick: upstream: https://github.com/ImageMagick/ImageMagick6/commit/6ce6d25b47caf9b6b2979a510b6202ce0f3dd2d4 upstream_imagemagick: needs-triage precise/esm_imagemagick: DNE trusty_imagemagick: released (8:6.7.7.10-6ubuntu3.12) trusty/esm_imagemagick: DNE (trusty was released [8:6.7.7.10-6ubuntu3.12]) xenial_imagemagick: released (8:6.8.9.9-7ubuntu5.12) esm-infra/xenial_imagemagick: released (8:6.8.9.9-7ubuntu5.12) artful_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu2.3) bionic_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu6.3) devel_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu9)