Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

Ubuntu 16.04 ESM: USN-5855-4 Moderate: ImageMagick Denial Of Service

ubuntu
Calendar Grey April 17, 2023
Scroller Ubuntu
Numerous vulnerabilities addressed in OpenSSL for Ubuntu 18.04 and 20.04. Upgrade your system to strengthen protection.
Several security issues were fixed in ImageMagick.

Summary

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

Details:

USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the

corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

 It was discovered that ImageMagick incorrectly handled certain PNG images.

 If a user or automated system were tricked into opening a specially

crafted

 PNG file, an attacker could use this issue to cause ImageMagick to stop

 responding, resulting in a denial of service, or possibly obtain the

 contents of arbitrary files by including them into images.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu update instructions ImageMagick

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   imagemagick                     8:6.8.9.9-7ubuntu5.16+esm7
   imagemagick-6.q16               8:6.8.9.9-7ubuntu5.16+esm7
   libmagick++-6.q16-5v5           8:6.8.9.9-7ubuntu5.16+esm7
   libmagickcore-6.q16-2           8:6.8.9.9-7ubuntu5.16+esm7
   libmagickcore-6.q16-2-extra     8:6.8.9.9-7ubuntu5.16+esm7

Ubuntu 14.04 ESM:
   imagemagick                     8:6.7.7.10-6ubuntu3.13+esm5
   libmagick++5                    8:6.7.7.10-6ubuntu3.13+esm5
   libmagickcore5                  8:6.7.7.10-6ubuntu3.13+esm5
   libmagickcore5-extra            8:6.7.7.10-6ubuntu3.13+esm5

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-5855-4

  https://ubuntu.com/security/notices/USN-5855-1

  CVE-2022-44267, CVE-2022-44268

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu update instructions ImageMagick

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.