Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesecurity issue

Gentoo: 201706-06 Normal: ImageWorsener Denial Of Service Issues

Multiple vulnerabilities have been found in ImageWorsener, the worst of which allows remote attackers to cause a Denial of Service condition or have other unspecified impact. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201706-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: ImageWorsener: Multiple vulnerabilities Date: June 06, 2017 Bugs: #618014 ID: 201706-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in ImageWorsener, the worst of which allows remote attackers to cause a Denial of Service condition or have other unspecified impact. Background ========= ImageWorsener is a cross-platform command-line utility and library for image scaling and other image processing. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/imageworsener < 1.3.1 > = 1.3.1 Description ========== Multiple vulnerabilities have been discovered in ImageWorsener. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could entice a user to process a specially crafted image file using ImageWorsener, possibly resulting in a Denial of Service condition or have other unspecified impacts. Workaround ========= There is no known workaround at this time. Resolution ========= All ImageWorsener users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/imageworsener-1.3.1" References ========= [ 1 ] CVE-2017-7452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7452 [ 2 ] CVE-2017-7453 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7453 [ 3 ] CVE-2017-7454 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7454 [ 4 ] CVE-2017-7939 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7939 [ 5 ] CVE-2017-7940 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7940 [ 6 ] CVE-2017-7962 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7962 [ 7 ] CVE-2017-8325 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-8325 [ 8 ] CVE-2017-8326 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-8326 [ 9 ] CVE-2017-8327 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-8327 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201706-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2017 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . Numerous security flaws identified in ImageMagick may lead to potential remote denial of service incidents. It is recommended to update to version 1.3.2 or newer.. ImageWorsener, Denial of Service, Gentoo Security. . LinuxSecurity.com Team

Jun 06, 2017 Gentoo