Ubuntu 16.10 Security Advisory 3232-1: ImageMagick DoS Risk

ubuntu

March 14, 2017

Several security issues were fixed in ImageMagick.

Summary

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

It was discovered that ImageMagick incorrectly handled certain malformed

image files. If a user or automated system using ImageMagick were tricked

into opening a specially crafted image, an attacker could exploit this to

cause a denial of service or possibly execute code with the privileges of

the user invoking the program.

Topics Covered

security advisory security issue update Ubuntu Moderate ImageMagick Denial Of Service

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  imagemagick                     8:6.8.9.9-7ubuntu8.5
  imagemagick-6.q16               8:6.8.9.9-7ubuntu8.5
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu8.5
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu8.5
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu8.5

Ubuntu 16.04 LTS:
  imagemagick                     8:6.8.9.9-7ubuntu5.6
  imagemagick-6.q16               8:6.8.9.9-7ubuntu5.6
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu5.6
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.6
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.6

Ubuntu 14.04 LTS:
  imagemagick                     8:6.7.7.10-6ubuntu3.6
  libmagick++5                    8:6.7.7.10-6ubuntu3.6
  libmagickcore5                  8:6.7.7.10-6ubuntu3.6
  libmagickcore5-extra            8:6.7.7.10-6ubuntu3.6

Ubuntu 12.04 LTS:
  imagemagick                     8:6.6.9.7-5ubuntu3.9
  libmagick++4                    8:6.6.9.7-5ubuntu3.9
  libmagickcore4                  8:6.6.9.7-5ubuntu3.9
  libmagickcore4-extra            8:6.6.9.7-5ubuntu3.9

In general, a standard system update will make all the necessary changes.