Red Hat update for ImageMagick

SA49063

CVE-2010-4167, CVE-2012-0247, CVE-2012-0248, CVE-2012-0259, CVE-2012-0260, CVE-2012-1798

08 May 2012

Moderately Critical

Vendor Patch

From remote

DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

Red Hat has issued an update for ImageMagick. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

For more information:
SA42497
SA47926
SA48679 (#1-#3)

Updated packages are available via Red Hat Network.
https://rhn.redhat.com/

RHSA-2012:0544-01:
https://rhn.redhat.com/errata/RHSA-2012-0544.html