[SECURITY] [DLA 517-1] imagemagick security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Package : imagemagick
Version : 8:6.7.7.10-5+deb7u7
CVE ID : CVE-2016-4563
The code did not check the integer didn't overflow before trying to
resize a buffer. A specially crafted file could result in using memory
past the end of the allocated buffer.
This security CVEs for this issue (CVE-2016-4563) along with
CVE-2016-4562 and CVE-2016-4564 were based on a security advisory that
will not be made public. This security fix was generated based only on
the surface-level code-change information that is public in GitHub. For
more information on this, see: http://seclists.org/oss-sec/2016/q2/476
For Debian 7 "Wheezy", these problems have been fixed in version
8:6.7.7.10-5+deb7u7.
We recommend that you upgrade your imagemagick packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- --
Brian May <bam@debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCAAGBQJXY7d2AAoJEBeEV3+BH26s57QQAOmB2qERr+I1jIIvad3De+UZ
SCQ4QxE0DIw7kAZOJg9udcAD00LOZ8hKoU2slVf7DLwdHkmyvICsBvw6qQzRBtPc
m5WnJUX0Ul3ettHjwmYvw3m4jRxDh/Qa5BtFNgIKwnFXYWMco32QHIFen7P1zA+W
Yuch9yDb3zI1UOJz1918bEoNdhdsiCOy4FL5D7ABja0m+f8pNYIbiriOBw4uvb3D
5p7RR+mXsN+3B5rcmSSNYt6xlhzJAxi2vAlGU/u1c1AqpUczwry0ZnbOujIee9Qg
W+YIF6ZPhjWIvUfGew/nGog9JgTrBQmod8oezujilO2diZZqRXmoEHJLV/thQiZk
AR2tb/oghtmbED0ER8qc2dECYNT3h9RDLzNaNyG65LhjcxZLTPWH8UHZ2zKAa/4Q
9gY4/OQFFXTjkARp6136Wpv6Aktw8tdq4Y/yIIogAvJtGxmZaY935HK7qQoIl9tR
xuKFaQmttmyaKzz4OzHZ3IZrVzejL+tDn+pcV5cGBL9CSPnsvS3NC1sbHxBKXrr4
jzSSNSyLAFkpND3ja7y6PErwMaUo6xvOiwbVb0n7LoPydfCR91vlcriuKvQhSliH
Xsijpxpz3eApGvPpls960cyRHm0/26m2XGaZGFoK4bO9UXvHqGrhfRQsuMv6NgiQ
Azx/iENeUAeY8Ct6Ox3t
=zShy
-----END PGP SIGNATURE-----
Reply to: