<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p><span class="im">==============================<wbr>==============================<wbr>==============<br>
Ubuntu Security Notice USN-7164-1<br>
December 17, 2024<br>
<br>
imagemagick vulnerability<br>
==============================<wbr>==============================<wbr>==============<br>
<br>
A security issue affects these releases of Ubuntu and its
derivatives:<br>
<br>
- Ubuntu 14.04 LTS<br>
<br>
Summary:<br>
<br>
ImageMagick could be made to crash if it received specially
crafted<br>
input.<br>
<br>
Software Description:<br>
- imagemagick: Image manipulation programs and library<br>
<br>
Details:<br>
<br>
It was discovered that ImageMagick incorrectly handled certain
malformed<br>
</span>
files. If a user or automated system were tricked into opening a
specially<br>
crafted file, an attacker could possibly exploit this to cause a
denial of<img class="ajT"
src="https://ssl.gstatic.com/ui/v1/icons/mail/images/cleardot.gif"> <br>
service.</p>
<br>
Update instructions:<br>
<br>
The problem can be corrected by updating your system to the
following<br>
package versions:<br>
<br>
Ubuntu 14.04 LTS<br>
imagemagick 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
imagemagick-common 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagick++-dev 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagick++5 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagickcore-dev 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagickcore5 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagickcore5-extra 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagickwand-dev 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
libmagickwand5 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
perlmagick 8:6.7.7.10-6ubuntu3.13+esm12<br>
Available with Ubuntu Pro<br>
<br>
In general, a standard system update will make all the necessary
changes.<br>
<br>
References:<br>
<a href="https://ubuntu.com/security/notices/USN-7164-1"
rel="noreferrer" target="_blank"
data-saferedirecturl="https://www.google.com/url?q=https://ubuntu.com/security/notices/USN-7164-1&source=gmail&ust=1734522536048000&usg=AOvVaw2jL3qF0NkrQjy0mgYW1sAh">https://ubuntu.com/security/no<wbr>tices/USN-7164-1</a><br>
CVE-2021-20176, CVE-2021-20241, CVE-2021-20243
</body>
</html>