Ubuntu: 2016-3142 Moderate: ImageMagick Denial Of Service Advisory

ubuntu

November 30, 2016

Several security issues were fixed in ImageMagick.

Summary

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

It was discovered that ImageMagick incorrectly handled certain malformed

image files. If a user or automated system using ImageMagick were tricked

into opening a specially crafted image, an attacker could exploit this to

cause a denial of service or possibly execute code with the privileges of

the user invoking the program.

Topics Covered

security advisory denial of service software update Ubuntu ImageMagick

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  imagemagick                     8:6.8.9.9-7ubuntu8.2
  imagemagick-6.q16               8:6.8.9.9-7ubuntu8.2
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu8.2
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu8.2
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu8.2

Ubuntu 16.04 LTS:
  imagemagick                     8:6.8.9.9-7ubuntu5.3
  imagemagick-6.q16               8:6.8.9.9-7ubuntu5.3
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu5.3
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.3
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.3

Ubuntu 14.04 LTS:
  imagemagick                     8:6.7.7.10-6ubuntu3.3
  libmagick++5                    8:6.7.7.10-6ubuntu3.3
  libmagickcore5                  8:6.7.7.10-6ubuntu3.3
  libmagickcore5-extra            8:6.7.7.10-6ubuntu3.3

Ubuntu 12.04 LTS:
  imagemagick                     8:6.6.9.7-5ubuntu3.6
  libmagick++4                    8:6.6.9.7-5ubuntu3.6
  libmagickcore4                  8:6.6.9.7-5ubuntu3.6
  libmagickcore4-extra            8:6.6.9.7-5ubuntu3.6

In general, a standard system update will make all the necessary changes.