English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Red Hat update for ImageMagick


Secunia ID

SA49068

CVE-ID

CVE-2012-0247, CVE-2012-0248, CVE-2012-0260

Release Date

08 May 2012

Criticality

Moderately Critical

Solution Status

Vendor Patch

Where

From remote

Impact
DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

System access

This covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user.

Description

Red Hat has issued an update for ImageMagick. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

For more information:
SA47926
SA48679 (#2)

Solution

Updated packages are available via Red Hat Network.
https://rhn.redhat.com/

Original Advisory

RHSA-2012:0545-01:
https://rhn.redhat.com/errata/RHSA-2012-0545.html