27 Nov
2016
27 Nov
'16
09:48
apticron report [Sun, 27 Nov 2016 09:48:24 +0100]
========================================================================
apticron has detected that some packages need upgrading on:
hexagon.federez.net
[ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ]
The following packages are currently pending an upgrade:
imagemagick 8:6.8.9.9-5+deb8u6
imagemagick-6.q16 8:6.8.9.9-5+deb8u6
imagemagick-common 8:6.8.9.9-5+deb8u6
libmagickcore-6.q16-2 8:6.8.9.9-5+deb8u6
libmagickcore-6.q16-2-extra 8:6.8.9.9-5+deb8u6
libmagickwand-6.q16-2 8:6.8.9.9-5+deb8u6
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour imagemagick (imagemagick imagemagick-6.q16 imagemagick-common
libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickwand-6.q16-2) ---
imagemagick (8:6.8.9.9-5+deb8u6) jessie-security; urgency=medium
* Fix CVE-2016-7799: global buffer overflow. (Closes: #840437).
* Fix CVE-2016-7906: use after free. (Closes: #840435).
* Fix a TIFF file buffer overflow. (Closes: #845195).
* Check return of fputc during TIFF file writing.
(Closes: #845196).
* Prevent buffer overflow by checking image extend
for TIFF (Closes: #845198).
* Avoid a out of bound read in VIFF file handler.
(Closes: #845212 and LP: #1545183).
* Avoid a DOS by not allowing too deep nested exception.
(Closes: #845213).
* Better check for buffer overflow in TIFF files
handling. (Closes: #845202).
* Fix CVE-2016-8677: memory allocate failure in AcquireQuantumPixels
(Closes: #845206).
* Prevent fault in MSL interpreter. (Closes: #845242).
* Prevent heap buffer overflow in heap-buffer-overflow in IsPixelGray
(Closes: #845242)
* Fix null pointer dereference in TIFF file handling.
(Closes: #845243).
* Added check for invalid number of frames in mat file
(Closes: #845244).
* Fix an out of bound read in mat file due to insuffisant allocation.
(Closes: #845246).
* Fix CVE-2016-8862: memory allocation failure in AcquireMagickMemory
(Closes: #845634).
-- Bastien Roucariès <roucaries.bastien+debian(a)gmail.com> Fri, 25 Nov 2016
21:45:37 +0100
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on hexagon.federez.net
--
apticron