Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:13993-1

Опубликовано: 27 мар. 2019
Источник: suse-cvrf

Описание

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

Security issues fixed:

  • CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649).
  • CVE-2018-18544: Fixed memory leak in the function WriteMSLImage (bsc#1113064).
  • CVE-2018-20467: Fixed infinite loop in coders/bmp.c (bsc#1120381).
  • CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366).
  • CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS (bsc#1106989).
  • CVE-2018-16412: Prevent heap-based buffer over-read in the ParseImageResourceBlocks function leading to DOS (bsc#1106996).
  • CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4
libMagickCore1-6.4.3.6-78.92.1
libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libMagickCore1-6.4.3.6-78.92.1
libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Software Development Kit 11 SP4
ImageMagick-6.4.3.6-78.92.1
ImageMagick-devel-6.4.3.6-78.92.1
libMagick++-devel-6.4.3.6-78.92.1
libMagick++1-6.4.3.6-78.92.1
libMagickWand1-6.4.3.6-78.92.1
libMagickWand1-32bit-6.4.3.6-78.92.1
perl-PerlMagick-6.4.3.6-78.92.1

Ссылки

Описание

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки

Описание

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.92.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.92.1
Ссылки