ImageMagick 6.3.5-9, important security updates

[email protected]
Newsgroups gmane.comp.video.image-magick.user,gmane.comp.video.image-magick.devel
Message-ID <[email protected]>
iDefense is planning to announce a number of security issues with
ImageMagick in releases prior to 6.3.5-9.  All known security issues
are resolved with the recent release of 6.3.5-9.  The issues are
predominately data driven integer overflow that potentially cause less
memory to be allocated than required.  We have addressed this security
flaw by introducing the AcquireQuantumMemory() method that accepts a
element count and size.  If `count' times `size' overflow (i.e. result
greater than 4GB), we return an error.  Note that there are no known
exploits for these issues but you might want to consider upgrading if
you can or to apply patches against any older versions of ImageMagick
you might be using.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.