ImageMagick vulnerability CVE-2016-3714

Resolved

Minor impact

Started

Lasted 2545h 23m

View official incident ↗

Updates

  1. Resolved

    We have released =media-gfx/imagemagick-6.7.8.7-r2 and =media-gfx/imagemagick-6.9.0.3-r2 for our Stable V4 stack to resolve both cve vulnerabilities.

  2. Investigating

    New packages for CVE-2016-5118 have been released.

  3. Investigating

    We are tracking CVE-2016-5118 and CVE-2016-3714 together. We will update this status page when a fix is released.

  4. Investigating

    ImageMagick vulnerability CVE-2016-3714 announced. There is currently no patch available. However, you can protect your application by following the steps listed at: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&p=132726&sid=6b961f8b680a0c18189de528bd53504a#p132726 We will continue to monitor the situation as it develops.