Errata overview
Errata ID 185
Date 2016-05-27
Source package imagemagick
Fixed in version 8:6.7.7.10-5.59.201605232004
Description
This update fixes several vulnerabilities in ImageMagick. These
vulnerabilities, collectively known as ImageTragick, are the consequence of
lack of sanitization of untrusted input. An attacker with control on the
image input could, with the privileges of the user running the application,
execute code (CVE-2016-3714), make HTTP GET or FTP requests (CVE-2016-3718),
or delete (CVE-2016-3715), move (CVE-2016-3716), or read (CVE-2016-3717)
local files.
Additional notes
CVE ID CVE-2016-3714
CVE-2016-3715
CVE-2016-3716
CVE-2016-3717
CVE-2016-3718
UCS Bug number #41331