Debian Security Advisory
DLA-731-2 imagemagick -- LTS security update
- Date Reported:
- 11 Dec 2016
- Affected Packages:
- imagemagick
- Vulnerable:
- Yes
- Security database references:
- In the Debian bugtracking system: Bug 847058.
- More information:
-
The update for imagemagick issued as DLA-731-1 caused regressions when decoding properties of certain images. Updated packages are now available to address this problem. For reference, the original advisory text follows.
Several issues have been discovered in ImageMagick, a popular set of programs and libraries for image manipulation. These issues include several problems in memory handling that can result in a denial of service attack or in execution of arbitrary code by an attacker with control on the image input.
For Debian 7
Wheezy
, these problems have been fixed in version 8:6.7.7.10-5+deb7u9.We recommend that you upgrade your imagemagick packages.
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS