Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:1301-1

Опубликовано: 13 мая 2016
Источник: suse-cvrf

Описание

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • bsc#978061: A vulnerability in ImageMagick's 'https' module allowed users to execute arbitrary shell commands on the host performing the image conversion. The issue had the potential for remote command injection. This update mitigates the vulnerability by disabling all access to the 'https' module in the 'delegates.xml' config file. (CVE-2016-3714)

Список пакетов

SUSE Linux Enterprise Server 11 SP2-LTSS
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP3-LTSS
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP4
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Software Development Kit 11 SP4
ImageMagick-6.4.3.6-7.37.1
ImageMagick-devel-6.4.3.6-7.37.1
libMagick++-devel-6.4.3.6-7.37.1
libMagick++1-6.4.3.6-7.37.1
libMagickWand1-6.4.3.6-7.37.1
libMagickWand1-32bit-6.4.3.6-7.37.1
perl-PerlMagick-6.4.3.6-7.37.1
SUSE Manager 2.1
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Manager Proxy 2.1
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE OpenStack Cloud 5
libMagickCore1-6.4.3.6-7.37.1
libMagickCore1-32bit-6.4.3.6-7.37.1

Ссылки

Описание

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

Затронутые продукты
SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.37.1
SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.37.1
Ссылки
Уязвимость SUSE-SU-2016:1301-1