Ubuntu: USN-3302-1 Moderate: ImageMagick Denial of Service Risk

ubuntu

May 30, 2017

Several security issues were fixed in ImageMagick.

Summary

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

It was discovered that ImageMagick incorrectly handled certain malformed

image files. If a user or automated system using ImageMagick were tricked

into opening a specially crafted image, an attacker could exploit this to

cause a denial of service or possibly execute code with the privileges of

the user invoking the program.

Topics Covered

security advisory moderate denial of service Ubuntu image processing

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  imagemagick                     8:6.9.7.4+dfsg-3ubuntu1.1
  imagemagick-6.q16               8:6.9.7.4+dfsg-3ubuntu1.1
  libmagick++-6.q16-7             8:6.9.7.4+dfsg-3ubuntu1.1
  libmagickcore-6.q16-3           8:6.9.7.4+dfsg-3ubuntu1.1
  libmagickcore-6.q16-3-extra     8:6.9.7.4+dfsg-3ubuntu1.1

Ubuntu 16.10:
  imagemagick                     8:6.8.9.9-7ubuntu8.6
  imagemagick-6.q16               8:6.8.9.9-7ubuntu8.6
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu8.6
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu8.6
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu8.6

Ubuntu 16.04 LTS:
  imagemagick                     8:6.8.9.9-7ubuntu5.7
  imagemagick-6.q16               8:6.8.9.9-7ubuntu5.7
  libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu5.7
  libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.7
  libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.7

Ubuntu 14.04 LTS:
  imagemagick                     8:6.7.7.10-6ubuntu3.7
  libmagick++5                    8:6.7.7.10-6ubuntu3.7
  libmagickcore5                  8:6.7.7.10-6ubuntu3.7
  libmagickcore5-extra            8:6.7.7.10-6ubuntu3.7

In general, a standard system update will make all the necessary changes.