Summary
[6.7.2.7-5]
- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.7.8.9-15.el7_2 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.7.8.9-15.el7_2 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.7.8.9-15.el7_2 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.7.8.9-15.el7_2 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.7.8.9-15.el7_2 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.7.8.9-15.el7_2 |
Vulnerabilities 7
-
Unscored —
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service…
-
Unscored —
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of se…
-
Unscored —
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a den…
-
Unscored —
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial…
-
Unscored —CVE-2016-5118 EPSS 50%
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbi…
-
Unscored —
The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute …
-
Unscored —
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick all…