A imagemagick security update has been released for Arch Linux.
ASA-202006-14: imagemagick: information disclosure
Arch Linux Security Advisory ASA-202006-14
=========================================
Severity: Medium
Date : 2020-06-28
CVE-ID : CVE-2020-13902
Package : imagemagick
Type : information disclosure
Remote : Yes
Link : https://security.archlinux.org/AVG-1181
Summary
======
The package imagemagick before version 7.0.10.20-1 is vulnerable to
information disclosure.
Resolution
=========
Upgrade to 7.0.10.20-1.
# pacman -Syu "imagemagick>=7.0.10.20-1"
The problem has been fixed upstream in version 7.0.10.20.
Workaround
=========
None.
Description
==========
An out-of-bounds read has been found in the TIFF image decoding part of
imagemagick
