REDHAT-BUG-1378739: Low severity ImageMagick ImageMagick vulnerability

Published Sep 23, 2016

Updated

Bug report(s):

https://github.com/ImageMagick/ImageMagick/issues/83 https://bugs.launchpad.net/bugs/1533442 https://bugs.debian.org/832457

Upstream patch(es):

https://github.com/ImageMagick/ImageMagick/commit/198fffab4daf8aea88badd9c629350e5b26ec32f https://github.com/ImageMagick/ImageMagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d https://github.com/ImageMagick/ImageMagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb https://github.com/ImageMagick/ImageMagick/commit/280215b9936d145dd5ee91403738ccce1333cab1

CVE assignment:

http://seclists.org/oss-sec/2016/q3/590

Affected Software

1 affected component

ImageMagick ImageMagick

Event History

Sep 23, 2016

Data Sourced

via Red Hat·08:45 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1378739?

The severity of REDHAT-BUG-1378739 is classified as critical due to potential vulnerabilities in ImageMagick.

How do I fix REDHAT-BUG-1378739?

To fix REDHAT-BUG-1378739, update your ImageMagick installation to the latest patched version.

What software is affected by REDHAT-BUG-1378739?

REDHAT-BUG-1378739 affects the ImageMagick software across various versions.

Is there a workaround for REDHAT-BUG-1378739?

A temporary workaround for REDHAT-BUG-1378739 is to disable processing of untrusted images.

Where can I find more information about REDHAT-BUG-1378739?

More information about REDHAT-BUG-1378739 can be found in the bug report on Red Hat's Bugzilla.