USN-337-1: imagemagick vulnerability

Releases

• Ubuntu 6.06
• Ubuntu 5.10
• Ubuntu 5.04

Details

Damian Put discovered a buffer overflow in imagemagick's SGI file
format decoder. By tricking an user or automated system into
processing a specially crafted SGI image, this could be exploited to
execute arbitrary code with the user's privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 6.06

• libmagick9 - 6:6.2.4.5-0.6ubuntu0.1

Ubuntu 5.10

• libmagick6 - 6:6.2.3.4-1ubuntu1.2

Ubuntu 5.04

• libmagick6 - 6:6.0.6.2-2.1ubuntu1.3

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

References

• CVE-2006-4144