diff options
Diffstat (limited to 'metadata/glsa/glsa-201606-14.xml')
| -rw-r--r-- | metadata/glsa/glsa-201606-14.xml | 67 |
1 files changed, 67 insertions, 0 deletions
diff --git a/metadata/glsa/glsa-201606-14.xml b/metadata/glsa/glsa-201606-14.xml new file mode 100644 index 000000000000..3f2bccf41be7 --- /dev/null +++ b/metadata/glsa/glsa-201606-14.xml @@ -0,0 +1,67 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> +<glsa id="201606-14"> + <title>ImageMagick: Multiple vulnerabilities</title> + <synopsis>Multiple vulnerabilities have been found in ImageMagick including + overflows and possible Denials of Service. + </synopsis> + <product type="ebuild">imagemagick</product> + <announced>2016-06-26</announced> + <revised count="1">2016-06-26</revised> + <bug>534106</bug> + <bug>562892</bug> + <access>remote</access> + <affected> + <package name="media-gfx/imagemagick" auto="yes" arch="*"> + <unaffected range="ge">6.9.0.3</unaffected> + <vulnerable range="lt">6.9.0.3</vulnerable> + </package> + </affected> + <background> + <p>Imagemagick is a collection of tools and libraries for many image + formats. + </p> + </background> + <description> + <p>Multiple vulnerabilities have been discovered in ImageMagick including, + but not limited to, various overflows and potential Denials of Service. + Please visit the references and related bug reports for additional + information. + </p> + </description> + <impact type="normal"> + <p>Remote attackers could potentially perform buffer overflows or conduct + Denials of Service. + </p> + </impact> + <workaround> + <p>There is no known workaround at this time.</p> + </workaround> + <resolution> + <p>All ImageMagick users should upgrade to the latest version:</p> + + <code> + # emerge --sync + # emerge --ask --oneshot --verbose ">=media-gfx/imagemagick-6.9.0.3" + </code> + + </resolution> + <references> + <uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803"> + Double free in coders/pict.c:2000 + </uri> + <uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362"> + Double free in coders/tga.c:221 + </uri> + <uri link="http://www.openwall.com/lists/oss-security/2014/12/24/1"> + Imagemagick fuzzing bug + </uri> + <uri link="https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1459747"> + Integer and Buffer overflow in coders/icon.c + </uri> + </references> + <metadata tag="requester" timestamp="2015-01-17T17:37:18Z"> + BlueKnight + </metadata> + <metadata tag="submitter" timestamp="2016-06-26T13:53:19Z">b-man</metadata> +</glsa> |