Описание
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
This security issue was fixed:
- CVE-2016-5118: Prevent code execution via popen() (bsc#982178)
This non-security issue was fixed:
- Fix encoding of /Title in generated PDFs. (bsc#867943) This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
ImageMagick-6.8.8.1-12.1
ImageMagick-devel-6.8.8.1-12.1
ImageMagick-devel-32bit-6.8.8.1-12.1
ImageMagick-doc-6.8.8.1-12.1
ImageMagick-extra-6.8.8.1-12.1
libMagick++-6_Q16-3-6.8.8.1-12.1
libMagick++-6_Q16-3-32bit-6.8.8.1-12.1
libMagick++-devel-6.8.8.1-12.1
libMagick++-devel-32bit-6.8.8.1-12.1
libMagickCore-6_Q16-1-6.8.8.1-12.1
libMagickCore-6_Q16-1-32bit-6.8.8.1-12.1
libMagickWand-6_Q16-1-6.8.8.1-12.1
libMagickWand-6_Q16-1-32bit-6.8.8.1-12.1
perl-PerlMagick-6.8.8.1-12.1
Ссылки
- E-Mail link for openSUSE-SU-2016:1653-1
- SUSE Security Ratings
Описание
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
Затронутые продукты
openSUSE Leap 42.1:ImageMagick-6.8.8.1-12.1
openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-12.1
openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-12.1
openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-12.1
Ссылки
- CVE-2016-5118
- SUSE Bug 982178