相关CVE编号：
CVE: CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718
如果直接升级可能会有报错：
Error unpacking rpm package ImageMagick-6.7.8.9-18.el7.x86_64
error: unpacking of archive failed on file /usr/bin/stream: cpio: rename
是因为文件系统保护导致，去掉i选项：
chattr -i /usr/bin/animate
chattr -i /usr/bin/compare
chattr -i /usr/bin/composite
chattr -i /usr/bin/conjure
chattr -i /usr/bin/convert
chattr -i /usr/bin/display
chattr -i /usr/bin/identify
chattr -i /usr/bin/import
chattr -i /usr/bin/mogrify
chattr -i /usr/bin/montage
chattr -i /usr/bin/stream
再升级：
yum -y update ImageMagick
升级完，记得加回去：
chattr +i /usr/bin/animate
chattr +i /usr/bin/compare
chattr +i /usr/bin/composite
chattr +i /usr/bin/conjure
chattr +i /usr/bin/convert
chattr +i /usr/bin/display
chattr +i /usr/bin/identify
chattr +i /usr/bin/import
chattr +i /usr/bin/mogrify
chattr +i /usr/bin/montage
chattr +i /usr/bin/stream
下面是过程：
# yum -y update ImageMagick
Loaded plugins: fastestmirror, langpacks, priorities
Loading mirror speeds from cached hostfile
5081 packages excluded due to repository priority protections
Resolving Dependencies
--> Running transaction check
---> Package ImageMagick.x86_64 0:6.7.8.9-10.el7 will be updated
---> Package ImageMagick.x86_64 0:6.7.8.9-18.el7 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
==============================================================================
Package Arch Version Repository Size
==============================================================================
Updating:
ImageMagick x86_64 6.7.8.9-18.el7 ifengcdnbase 2.1 M
Transaction Summary
==============================================================================
Upgrade 1 Package
Total download size: 2.1 M
Downloading packages:
No Presto metadata available for ifengcdnbase
ImageMagick-6.7.8.9-18.el7.x86_64.rpm | 2.1 MB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : ImageMagick-6.7.8.9-18.el7.x86_64 1/2
/sbin/ldconfig: /lib/libwebp-imageio.so is not a symbolic link
/sbin/ldconfig: /lib64/libwebp-imageio.so is not a symbolic link
Cleanup : ImageMagick-6.7.8.9-10.el7.x86_64 2/2
/sbin/ldconfig: /lib/libwebp-imageio.so is not a symbolic link
/sbin/ldconfig: /lib64/libwebp-imageio.so is not a symbolic link
Verifying : ImageMagick-6.7.8.9-18.el7.x86_64 1/2
Verifying : ImageMagick-6.7.8.9-10.el7.x86_64 2/2
Updated:
ImageMagick.x86_64 0:6.7.8.9-18.el7
Complete!