-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package : imagemagick Version : 8:6.7.7.10-5+deb7u7 CVE ID : CVE-2016-4563
The code did not check the integer didn't overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue (CVE-2016-4563) along with CVE-2016-4562 and CVE-2016-4564 were based on a security advisory that will not be made public. This security fix was generated based only on the surface-level code-change information that is public in GitHub. For more information on this, see: http://seclists.org/oss-sec/2016/q2/476 For Debian 7 "Wheezy", these problems have been fixed in version 8:6.7.7.10-5+deb7u7. We recommend that you upgrade your imagemagick packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS - -- Brian May <[email protected]> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXY7d2AAoJEBeEV3+BH26s57QQAOmB2qERr+I1jIIvad3De+UZ SCQ4QxE0DIw7kAZOJg9udcAD00LOZ8hKoU2slVf7DLwdHkmyvICsBvw6qQzRBtPc m5WnJUX0Ul3ettHjwmYvw3m4jRxDh/Qa5BtFNgIKwnFXYWMco32QHIFen7P1zA+W Yuch9yDb3zI1UOJz1918bEoNdhdsiCOy4FL5D7ABja0m+f8pNYIbiriOBw4uvb3D 5p7RR+mXsN+3B5rcmSSNYt6xlhzJAxi2vAlGU/u1c1AqpUczwry0ZnbOujIee9Qg W+YIF6ZPhjWIvUfGew/nGog9JgTrBQmod8oezujilO2diZZqRXmoEHJLV/thQiZk AR2tb/oghtmbED0ER8qc2dECYNT3h9RDLzNaNyG65LhjcxZLTPWH8UHZ2zKAa/4Q 9gY4/OQFFXTjkARp6136Wpv6Aktw8tdq4Y/yIIogAvJtGxmZaY935HK7qQoIl9tR xuKFaQmttmyaKzz4OzHZ3IZrVzejL+tDn+pcV5cGBL9CSPnsvS3NC1sbHxBKXrr4 jzSSNSyLAFkpND3ja7y6PErwMaUo6xvOiwbVb0n7LoPydfCR91vlcriuKvQhSliH Xsijpxpz3eApGvPpls960cyRHm0/26m2XGaZGFoK4bO9UXvHqGrhfRQsuMv6NgiQ Azx/iENeUAeY8Ct6Ox3t =zShy -----END PGP SIGNATURE-----
