Debian Security Advisory

DLA-868-1 imagemagick -- LTS security update

Date Reported:

24 Mar 2017

Affected Packages:

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 849439, Bug 856878, Bug 856879.
In Mitre's CVE dictionary: CVE-2016-10062, CVE-2017-6498, CVE-2017-6500.

More information:

Several issues have been discovered in ImageMagick, a popular set of programs and libraries for image manipulation. These issues include denial of service and memory buffer over-read.

For Debian 7 Wheezy, these problems have been fixed in version 8:6.7.7.10-5+deb7u12.

We recommend that you upgrade your imagemagick packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS