English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Debian update for imagemagick


Secunia ID

SA48974

CVE-ID

CVE-2012-0259, CVE-2012-0260, CVE-2012-1185, CVE-2012-1186, CVE-2012-1610, CVE-2012-1798

Release Date

30 Apr 2012

Last Change

07 May 2012

Criticality

Moderately Critical

Solution Status

Vendor Patch

Where

From remote

Impact
DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Description

Debian has issued an update for imagemagick. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

For more information:
SA47926
SA48679

Solution

Apply updated packages via the apt-get package manager.

NOTE: New packages have been released to fix a regression introduced in the previous update.

Original Advisory

DSA-2462-1:
http://lists.debian.org/debian-security-announce/2012/msg00094.html

DSA-2462-2:
http://www.debian.org/security/2012/dsa-2462