Bug 214520

Summary:	security/vuxml: Security vulnerability in ImageMagick (CVE-2016-9298)
Product:	Ports & Packages	Reporter:	VK <vlad-fbsd>
Component:	Individual Port(s)	Assignee:	Mark Felder <feld>
Status:	Closed FIXED
Severity:	Affects Only Me	CC:	feld
Priority:	---	Keywords:	needs-patch, security
Version:	Latest	Flags:	bugzilla: maintainer-feedback? (ports-secteam)
Hardware:	Any
OS:	Any
Bug Depends on:
Bug Blocks:	214517

Description VK 2016-11-15 00:56:30 UTC

There's a security vulnerability in ImageMagick, fixed in the latest version.

* Heap overflow (CVE-2016-9298)
  https://github.com/ImageMagick/ImageMagick/issues/296

Comment 1 VK 2016-11-15 00:57:38 UTC

More info here, CVE request:

* http://seclists.org/oss-sec/2016/q4/413

Comment 2 commit-hook freebsd_committer

2016-12-04 22:53:05 UTC

A commit references this bug:

Author: feld
Date: Sun Dec  4 22:52:26 UTC 2016
New revision: 427815
URL: https://svnweb.freebsd.org/changeset/ports/427815

Log:
  Document ImageMagick vulnerability

  PR:		214520
  Security:	CVE-2016-9298

Changes:
  head/security/vuxml/vuln.xml