Red Hat Security Advisory: ImageMagick security update

Fixed packages 56

Vulnerabilities 7

• Unscored —
  CVE-2015-8895

  Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service…

  imagemagick imagemagick Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2015-8896

  Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of se…

  imagemagick imagemagick Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2015-8897

  The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a den…

  imagemagick imagemagick Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2015-8898

  The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial…

  imagemagick imagemagick Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2016-5118 EPSS 50%

  The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbi…

  imagemagick imagemagick imagemagick graphicsmagick Debian Ubuntu Alpine
  Jun 10, 2016
• Unscored —
  CVE-2016-5239

  The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute …

  imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2016-5240

  The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick all…

  graphicsmagick graphicsmagick Debian Ubuntu
  Feb 27, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1269553
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1269562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1333417
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1334188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1340814
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1344264
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1344271
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1237.json
• report
  https://access.redhat.com/security/cve/CVE-2015-8895
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8895
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8895
• report
  https://access.redhat.com/security/cve/CVE-2015-8896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8896
• report
  https://access.redhat.com/security/cve/CVE-2015-8897
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8897
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8897
• article
  http://seclists.org/oss-sec/2016/q2/459
• article
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=28466
• report
  https://access.redhat.com/security/cve/CVE-2015-8898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-8898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-8898
• article
  https://github.com/ImageMagick/ImageMagick/pull/34
• report
  https://access.redhat.com/security/cve/CVE-2016-5118
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5118
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5118
• report
  https://access.redhat.com/security/cve/CVE-2016-5239
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5239
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5239
• report
  https://access.redhat.com/security/cve/CVE-2016-5240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5240