Resolved incident

ImageMagick vulnerability CVE-2016-3714

Engine Yard · Minor · Started over 10 years ago

Summary

Minor · Resolved

We have released =media-gfx/imagemagick-6.7.8.7-r2 and =media-gfx/imagemagick-6.9.0.3-r2 for our Stable V4 stack to resolve both cve vulnerabilities.

How this incident unfolded, from the official status page.

Investigating
over 10 years ago
Engine Yard
ImageMagick vulnerability CVE-2016-3714 announced. There is currently no patch available. However, you can protect your application by following the steps listed at: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&p=132726&sid=6b961f8b680a0c18189de528bd53504a#p132726 We will continue to monitor the situation as it develops.
Investigating
over 10 years ago
Engine Yard
We are tracking CVE-2016-5118 and CVE-2016-3714 together. We will update this status page when a fix is released.
Investigating
over 10 years ago
Engine Yard
New packages for CVE-2016-5118 have been released.
Resolved
about 10 years ago
Engine Yard
We have released =media-gfx/imagemagick-6.7.8.7-r2 and =media-gfx/imagemagick-6.9.0.3-r2 for our Stable V4 stack to resolve both cve vulnerabilities.