Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-34153

Fixed in a distro release EPSS 3%CVSS 7.8

A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.

Published 2023-05-30 · CVE record · OSV

Products: imagemagick, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora, redhat enterprise_linux

Distro releases

ReleasePackageFixed in
Chainguardimagemagick-60
SUSE Linux Enterprise Module for Desktop Applications 15 SP4ImageMagick7.1.0.9-150400.6.21.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5ImageMagick7.1.0.9-150400.6.21.1
SUSE Linux Enterprise Module for Development Tools 15 SP4ImageMagick7.1.0.9-150400.6.21.1
SUSE Linux Enterprise Module for Development Tools 15 SP5ImageMagick7.1.0.9-150400.6.21.1
openSUSE Leap 15.4ImageMagick7.1.0.9-150400.6.21.1
openSUSE Leap 15.5ImageMagick7.1.0.9-150400.6.21.1
openSUSE TumbleweedImageMagick7.1.1.17-1.1