REDHAT-BUG-1378738: Low severity imagemagick vulnerability

Published Sep 23, 2016

Updated

Bug report(s):

http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26861 https://bugs.debian.org/832944

Upstream patch(es):

https://github.com/ImageMagick/ImageMagick/commit/3ab016764c7f787829d9065440d86f5609765110 https://github.com/ImageMagick/ImageMagick/commit/9b428b7af688fe319320aed15f2b94281d1e37b4

CVE assignment:

http://seclists.org/oss-sec/2016/q3/590

Affected Software

1 affected component

ImageMagick

Event History

Sep 23, 2016

Data Sourced

via Red Hat·08:44 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1378738?

The severity of REDHAT-BUG-1378738 is categorized as moderate.

How do I fix REDHAT-BUG-1378738?

To fix REDHAT-BUG-1378738, update ImageMagick to the latest version that includes the upstream patches.

Which versions of ImageMagick are affected by REDHAT-BUG-1378738?

REDAHT-BUG-1378738 affects multiple versions of ImageMagick; please consult the specific release notes for the versions in question.

Is there a workaround for REDHAT-BUG-1378738?

As a temporary workaround for REDHAT-BUG-1378738, avoid using the specific functionality that triggers the vulnerability.

Has REDHAT-BUG-1378738 been patched in recent updates?

Yes, recent updates have addressed REDHAT-BUG-1378738 with appropriate patches.