Debian Security Advisory
DLA-517-1 imagemagick -- LTS security update
- Date Reported:
- 17 Jun 2016
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2016-4563.
- More information:
The code did not check the integer didn't overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer.
This security CVEs for this issue (CVE-2016-4563) along with CVE-2016-4562 and CVE-2016-4564 were based on a security advisory that will not be made public. This security fix was generated based only on the surface-level code-change information that is public in GitHub. For more information on this, see: http://seclists.org/oss-sec/2016/q2/476
For Debian 7
Wheezy, these problems have been fixed in version 8:220.127.116.11-5+deb7u7.
We recommend that you upgrade your imagemagick packages.
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS