| Package | Affected versions | Patched versions |
|---|---|---|
| graphicsmagick | < 1.3.32 | 1.3.32 |
| backports sle | = 15.0 |
In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free