67 lines
2.3 KiB
XML
67 lines
2.3 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
|
|
<glsa id="201606-14">
|
|
<title>ImageMagick: Multiple vulnerabilities</title>
|
|
<synopsis>Multiple vulnerabilities have been found in ImageMagick including
|
|
overflows and possible Denials of Service.
|
|
</synopsis>
|
|
<product type="ebuild">imagemagick</product>
|
|
<announced>2016-06-26</announced>
|
|
<revised count="1">2016-06-26</revised>
|
|
<bug>534106</bug>
|
|
<bug>562892</bug>
|
|
<access>remote</access>
|
|
<affected>
|
|
<package name="media-gfx/imagemagick" auto="yes" arch="*">
|
|
<unaffected range="ge">6.9.0.3</unaffected>
|
|
<vulnerable range="lt">6.9.0.3</vulnerable>
|
|
</package>
|
|
</affected>
|
|
<background>
|
|
<p>Imagemagick is a collection of tools and libraries for many image
|
|
formats.
|
|
</p>
|
|
</background>
|
|
<description>
|
|
<p>Multiple vulnerabilities have been discovered in ImageMagick including,
|
|
but not limited to, various overflows and potential Denials of Service.
|
|
Please visit the references and related bug reports for additional
|
|
information.
|
|
</p>
|
|
</description>
|
|
<impact type="normal">
|
|
<p>Remote attackers could potentially perform buffer overflows or conduct
|
|
Denials of Service.
|
|
</p>
|
|
</impact>
|
|
<workaround>
|
|
<p>There is no known workaround at this time.</p>
|
|
</workaround>
|
|
<resolution>
|
|
<p>All ImageMagick users should upgrade to the latest version:</p>
|
|
|
|
<code>
|
|
# emerge --sync
|
|
# emerge --ask --oneshot --verbose ">=media-gfx/imagemagick-6.9.0.3"
|
|
</code>
|
|
|
|
</resolution>
|
|
<references>
|
|
<uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803">
|
|
Double free in coders/pict.c:2000
|
|
</uri>
|
|
<uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362">
|
|
Double free in coders/tga.c:221
|
|
</uri>
|
|
<uri link="http://www.openwall.com/lists/oss-security/2014/12/24/1">
|
|
Imagemagick fuzzing bug
|
|
</uri>
|
|
<uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1459747">
|
|
Integer and Buffer overflow in coders/icon.c
|
|
</uri>
|
|
</references>
|
|
<metadata tag="requester" timestamp="2015-01-17T17:37:18Z">
|
|
BlueKnight
|
|
</metadata>
|
|
<metadata tag="submitter" timestamp="2016-06-26T13:53:19Z">b-man</metadata>
|
|
</glsa>
|