Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2018.0555
[SECURITY] [DLA 1293-1] imagemagick security update
26 February 2018
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: imagemagick
Publisher: Debian
Operating System: Debian GNU/Linux 7
Windows
UNIX variants (UNIX, Linux, OSX)
Impact/Access: Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2018-7443
Original Bulletin:
https://lists.debian.org/debian-lts-announce/2018/02/msg00028.html
Comment: This advisory references vulnerabilities in products which run on
platforms other than Debian. It is recommended that administrators
running imagemagick check for an updated version of the software for
their operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Package : imagemagick
Version : 8:6.7.7.10-5+deb7u21
CVE ID : CVE-2018-7443
Debian Bug : #891291
It was discovered that there was a remote denial of service
vulnerability in the imagemagick graphics library via a specially-
crafted TIFF file.
For Debian 7 "Wheezy", this issue has been fixed in imagemagick
version 8:6.7.7.10-5+deb7u21.
We recommend that you upgrade your imagemagick packages.
Regards,
- - --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
- -----BEGIN PGP SIGNATURE-----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=xf1K
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=2xEu
-----END PGP SIGNATURE-----