Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Fedora 23: FEDORA-2015-7faffa80f1 Critical: ImageMagick Buffer Issues

fedora
Calendar Grey December 8, 2015
Dist Fedora Esm H88
Fedora 23 has released a new version of ImageMagick to address severe security flaws that could result in potential application breaches.
Update to new upstream release 6.9.2-7 (bz#1224581), Security fix for: 1269556, 1269567

Summary

ImageMagick is an image display and manipulation tool for the X

Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,

and Photo CD image formats. It can resize, rotate, sharpen, color

reduce, or add special effects to an image, and when finished you can

either save the completed work in the original format or a different

one. ImageMagick also includes command line programs for creating

animated or transparent .gifs, creating composite images, creating

thumbnail images, and more.

ImageMagick is one of your choices if you need a program to manipulate

and display images. If you want to develop your own applications

which use ImageMagick code or APIs, you need to install

ImageMagick-devel as well.

Update Information:

Update to new upstream release 6.9.2-7 (bz#1224581), Security fix for: 1269556, 1269567

Topics%20covered

Topics Covered

security advisory critical software update fix ImageMagick buffer issue Fedora 23

Change Log

References


[ 1 ] Bug #1224581 - ImageMagick-6.9.2-8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1224581 [ 2 ] Bug #1267391 - ImageMagick 6.8.8.10 lost the support for JPEG 2000 format (jp2 extension) https://bugzilla.redhat.com/show_bug.cgi?id=1267391 [ 3 ] Bug #1269556 - ImageMagick: Integer and buffer overflow in coders/icon.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1269556 [ 4 ] Bug #1269567 - ImageMagick: Double free vulnerabilities in coders/{pict.c,tga.c} [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1269567 [ 5 ] Bug #1208347 - mutliarch conflicts in ImageMagick-devel https://bugzilla.redhat.com/show_bug.cgi?id=1208347

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update ImageMagick' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ImageMagick
Product: Fedora 23
Version: 6.9.2.7
Release: 1.fc23
URL: https://imagemagick.org/index.php
Summary: An X application for displaying and manipulating images

Topics%20covered

Topics Covered

security advisory critical software update fix ImageMagick buffer issue Fedora 23

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.