Security ImageMagick vulnerabilities CVE-2016-3714 (imagetragick) active exploitation confirmed

Forget it, my bad, the policy.xml get overwritten after yum update

 

So, when auto yum nightly update run, the policy.xml will overwritten again?
Should I run option 23 Update Centmin Mod Code Base?

 

I've no idea about it, but it got overwritten once I run

Code:

yum -y update --enablerepo=remi --disableplugin=priorities

Any links about how to safely update to 123.09beta01 from 123.08stable?

 

Code (Text):

./test.sh
testing read
SAFE

testing delete
SAFE

testing http with local port: 46016
SAFE

testing http with nonce: HNHNZY4F
SAFE

testing rce1
SAFE

testing rce2
SAFE

testing MSL
SAFE

Tried the PoCs. Seemed to be working properly

 

I forgot to update code base first (option 2) and straight to option 3. Is it OK?

Should I uninstall yum-cron to prevent policy.xml overwritten when Imagick updated?

 

@trxerz I believe you can exclude certain packages from yum cron. If I remember correctly, I had excluded ImageMagick from yum cron, for some reason.

 

Halo mas bob,
I've no idea about it, can you show me any links? especially to exclude Imagick

 

@trxerz I did it a couple months ago, so I can't really remember where I found the info.
But here's what I have in yum-cron-hourly.conf and yum-cron.conf:

Code (Text):

...
[base]
# This section overrides yum.conf
exclude = ImageMagick*
...

I'm not really sure what [...] does in the config file. But to be safe, just add it after [base], I suppose.

FYI, I've set yum-cron.conf not to download or apply updates and yum-cron-hourly.conf to always download and apply "default" updates (as opposed to its default, "security" updates only). So it should check updates every hour, but so far there's no issue with policy.xml.

 

I ran yum update and there was a new openssl/libre i think.

Code:

imagick

imagick module => enabled
imagick module version => 3.4.2
imagick classes => Imagick, ImagickDraw, ImagickPixel, ImagickPixelIterator, ImagickKernel
Imagick compiled with ImageMagick version => ImageMagick 6.9.3-10 Q16 x86_64 2016-05-04 http://www.imagemagick.org
Imagick using ImageMagick library version => ImageMagick 6.9.3-10 Q16 x86_64 2016-05-04 http://www.imagemagick.org
ImageMagick copyright => Copyright (C) 1999-2016 ImageMagick Studio LLC
ImageMagick release date => 2016-05-04
ImageMagick number of supported formats:  => 225
ImageMagick supported formats => 3FR, AAI, AI, ART, ARW, AVI, AVS, BGR, BGRA, BGRO, BIE, BMP, BMP2, BMP3, BRF, CAL, CALS, CANVAS, CAPTION, CIN, CIP, CLIP, CMYK, CMYKA, CR2, CRW, CUR, CUT, DATA, DCM, DCR, DCX, DDS, DFONT, DNG, DOT, DPX, DXT1, DXT5, EPDF, EPI, EPS, EPS2, EPS3, EPSF, EPSI, EPT, EPT2, EPT3, ERF, EXR, FAX, FITS, FRACTAL, FTS, G3, GIF, GIF87, GRADIENT, GRAY, GROUP4, GV, H, HALD, HDR, HISTOGRAM, HRZ, HTM, HTML, ICB, ICO, ICON, IIQ, INFO, INLINE, IPL, ISOBRL, ISOBRL6, JBG, JBIG, JNG, JNX, JPE, JPEG, JPG, JPS, JSON, K25, KDC, LABEL, M2V, M4V, MAC, MAGICK, MAP, MASK, MAT, MATTE, MEF, MIFF, MKV, MNG, MONO, MOV, MP4, MPC, MPEG, MPG, MRW, MSL, MSVG, MTV, MVG, NEF, NRW, NULL, ORF, OTB, OTF, PAL, PALM, PAM, PANGO, PATTERN, PBM, PCD, PCDS, PCL, PCT, PCX, PDB, PDF, PDFA, PEF, PES, PFA, PFB, PFM, PGM, PICON, PICT, PIX, PJPEG, PLASMA, PNG, PNG00, PNG24, PNG32, PNG48, PNG64, PNG8, PNM, PPM, PREVIEW, PS, PS2, PS3, PSB, PSD, PTIF, PWP, RADIAL-GRADIENT, RAF, RAS, RAW, RGB, RGBA, RGBO, RGF, RLA, RLE, RMF, RW2, SCR, SCT, SFW, SGI, SHTML, SIX, SIXEL, SPARSE-COLOR, SR2, SRF, STEGANO, SUN, SVG, SVGZ, TEXT, TGA, THUMBNAIL, TIFF, TIFF64, TILE, TIM, TTC, TTF, TXT, UBRL, UBRL6, UIL, UYVY, VDA, VICAR, VID, VIFF, VIPS, VST, WBMP, WEBP, WMF, WMV, WMZ, WPG, X, X3F, XBM, XC, XCF, XPM, XPS, XV, XWD, YCbCr, YCbCrA, YUV

Directive => Local Value => Master Value
imagick.locale_fix => 0 => 0
imagick.skip_version_check => 0 => 0
imagick.progress_monitor => 0 => 0

How do I confirm, i am on the safe version?