[ GLSA 201711-07 ] ImageMagick

[GLSA]

Gentoo Linux Security Advisory

Title: ImageMagick: Multiple vulnerabilities (GLSA 201711-07)
Severity: normal
Exploitable: remote
Date: 2017-11-11
Bug(s): #626454, #626906, #627036, #628192, #628490, #628646, #628650, #628700, #628702, #629354, #629482, #629576, #629932, #630256, #630458, #630674, #635200, #635664, #635666
ID: 201711-07

Synopsis

Multiple vulnerabilities have been found in ImageMagick, the worst
of which may allow remote attackers to cause a Denial of Service condition.


Background

A collection of tools and libraries for many image formats.

Affected Packages

Package: media-gfx/imagemagick
Vulnerable: < 6.9.9.20
Unaffected: >= 6.9.9.20
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in ImageMagick. Please
review the referenced CVE identifiers for details.


Impact

Remote attackers, by enticing a user to process a specially crafted
file, could obtain sensitive information, cause a Denial of Service
condition, or have other unspecified impacts.


Workaround

There is no known workaround at this time.

Resolution

All ImageMagick users should upgrade to the latest version: