bugtraq - [SECURITY] [DSA 4245-1] imagemagick security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20180714184746.GA15217@pisco.westfalen.local>
Date: Sat, 14 Jul 2018 20:47:46 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4245-1] imagemagick security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4245-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
July 14, 2018                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : imagemagick
CVE ID         : CVE-2018-5248 CVE-2018-11251 CVE-2018-12599 CVE-2018-12600

This update fixes several vulnerabilities in Imagemagick, a graphical
software suite. Various memory handling problems or incomplete input
sanitising could result in denial of service or the execution of
arbitrary code.
	       
For the stable distribution (stretch), these problems have been fixed in
version 8:6.9.7.4+dfsg-11+deb9u5.

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=Faza
-----END PGP SIGNATURE-----