Mageia alert MGASA-2017-0229 (graphicsmagick)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2017-0229: Updated graphicsmagick packages fix security vulnerabilities 
Date:
    	     
 
Sun, 30 Jul 2017 17:59:24 +0200
Message-ID:
    	     
 
<20170730155924.CF7579F88B@duvel.mageia.org>
MGASA-2017-0229 - Updated graphicsmagick packages fix security vulnerabilities

Publication date: 30 Jul 2017
URL: http://advisories.mageia.org/MGASA-2017-0229.html
Type: security
Affected Mageia releases: 5, 6
CVE: CVE-2016-7800,
     CVE-2016-7996,
     CVE-2016-7997,
     CVE-2016-8682,
     CVE-2016-8683,
     CVE-2016-8684,
     CVE-2016-9830,
     CVE-2017-6335,
     CVE-2017-8350,
     CVE-2017-10794,
     CVE-2017-10799,
     CVE-2017-10800,
     CVE-2017-11403

Description:
New stable upstream release including security fixes for CVE-2016-7800,
CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684,
CVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799,
CVE-2017-10800, CVE-2017-11403 and possibly several other security issues
with and without associated CVE number.

References:
- https://bugs.mageia.org/show_bug.cgi?id=19668
- http://www.graphicsmagick.org/NEWS.html#july-4-2017
- https://bugzilla.redhat.com/show_bug.cgi?id=1472214
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7800
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7996
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7997
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8682
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8683
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8684
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9830
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6335
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8350
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10794
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403

SRPMS:
- 5/core/graphicsmagick-1.3.26-1.1.mga5
- 6/core/graphicsmagick-1.3.26-1.1.mga6