26 February 2018
Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2018.0555 [SECURITY] [DLA 1293-1] imagemagick security update 26 February 2018 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: imagemagick Publisher: Debian Operating System: Debian GNU/Linux 7 Windows UNIX variants (UNIX, Linux, OSX) Impact/Access: Denial of Service -- Remote with User Interaction Resolution: Patch/Upgrade CVE Names: CVE-2018-7443 Original Bulletin: https://lists.debian.org/debian-lts-announce/2018/02/msg00028.html Comment: This advisory references vulnerabilities in products which run on platforms other than Debian. It is recommended that administrators running imagemagick check for an updated version of the software for their operating system. - --------------------------BEGIN INCLUDED TEXT-------------------- - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package : imagemagick Version : 8:22.214.171.124-5+deb7u21 CVE ID : CVE-2018-7443 Debian Bug : #891291 It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file. For Debian 7 "Wheezy", this issue has been fixed in imagemagick version 8:126.96.36.199-5+deb7u21. We recommend that you upgrade your imagemagick packages. Regards, - - -- ,''`. : :' : Chris Lamb `. `'` email@example.com / chris-lamb.co.uk `- - -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlqSeb4ACgkQHpU+J9Qx Hlg+dg//YcQ5krR7nMTqfR5qckerlsK1Mq7NoHETPVmzFwCO9dy2SrrOaqZTCT+Z mSnhM51chZJASUGsNyard1S0opL2IDflDORsVjJoN6j649ytNfmCTTjrYAAp1tRJ xsHwBTSs1/cILafdhCRtTeQDrCarkJfScv6BN3qmuKET2SXfVi9Y9Cvb4OWMtcEq 5/YxHPAwCsQL7KAd/XN23fdXQ9u0xY6WD9MZPW1mDZ/ZWppvhtcrbzJOMP1PLVJ5 4UiAm8A/qcLTqb3efEHU/rojylkROjb0VWgASfERjkSFB6XVoleoCHy4JfM//6dY NFAmhJh+KI5IhLUYJHgiLQikaqyy2bOsT0lu0b7wcsSeeYQXcVRjViDN+sz9sbJp 7iv0pKMt0b1ekUPJoWDKvNU4+1hm2vN1EKpTilM2SO5h9qp2hw0Rvlc9uNKfR7EY qH6HWelk3oAhVdrh3KaKDaRe0qZHiaCBYQEVrIVBlm5hf/KNz2/dThbJXDJlH4HL b9smIZwaBljP9Q6qDz894HOxnPsTW5TFqk5wZnfq0vtEC0WXZQoeH6VDq5svvSUo F2Owbx8i68YqeGVDAJo5Sn6sSQpGVpB32iUDRKbe+kuPg2EhBPnW6oZ7mLrThmN0 3A9tz3rdpbavD7kXRRBJWiiZViSqdWBykQye00I8lJ2uVpLuR/Y= =xf1K - -----END PGP SIGNATURE----- - --------------------------END INCLUDED TEXT-------------------- You have received this e-mail bulletin as a result of your organisation's registration with AusCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to firstname.lastname@example.org and we will forward your request to the appropriate person. NOTE: Third Party Rights This security bulletin is provided as a service to AusCERT's members. As AusCERT did not write the document quoted above, AusCERT has had no control over its content. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the author's website to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: https://www.auscert.org.au/bulletins/ =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: email@example.com Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iQIVAwUBWpN2A4x+lLeg9Ub1AQhOtQ//WgnhI3HrgohgjKfVW/F5hg6fDZGpt6uB D1Oa+YoETolkb+ArX7eOGMGjBtRk41jajkN+GhUq7mkbi9WHUhCd8z6dqTnC9GIS 2kkSrup1DF91GeJDZIkScE0z3+lC6VqY0bA5Y3V+OHS5Fj1VxLLJl0JFqRM5x8RG 8eJznomT9ZLm+kKfXGaBiLA0xsdaLy8O63wezUkypiAzQTMDA3XF1tMEzLH8LGhW bzySunSuFzG1pjbWvG6RQFev8b+KBAoKHw+l37JjfAW/7pMakap1KR8d2yAdgkbu Bsla9iOIxeSgbYAh7S9Rhm1nGv5U7MqcYLtP2KBCOHrCrHhwGJn4MuQKYZr9oDFL dou+ykmJGhbOuYmR2NJo+tECbFd72MjMzQZGvUhm+yK2AmCd5yjIz+mxuLxJLaWp AqFgjCw23ii0UQ1QxPR/c/T6QPufkqpWowu6B9yNQXI396V0ys9575gM72EOU3RV 0PkTXkux9xXr27aVMJp9jYAA3S8F0v4GZmuPUzbMFuNVjSFnOcs2QTF7V8xBCU1H j3VRqRSGFb0FyqznLtaJkD2v/yHzkoiyqApdIb1sQxiqNk9Xp/KZk/75iVXtpFND tHMs0MqplfSdmFw3rpEzS8bmez8+LOy03k9U/bApP9WGqjfIHeCDmXrsWXTr17ZN AEcWT1+z4Lc= =2xEu -----END PGP SIGNATURE-----