A critical security bug was recently found in versions of
ImageMagick
before 6.3.3-5. NIST assigned the bug its highest security
rating, and
claims the flaw "Provides administrator access, Allows
complete
confidentiality, integrity, and availability
violation":
htt
p://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1797
I subscribe to both the 'magick-announce' and
'magick-developers'
mailing list, and have not seen any announcements informing
people that
they need to upgrade or risk having their servers
compromised. Is there
an official ImageMagick channel for making these types of
security
announcements that I am not aware of?
craig
_______________________________________________
Magick-developers mailing list
Magick-developers imagemagick.org
http://studio.imagemagick.org/mailman/listinfo/m
agick-developers
|