Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:2271-1

Опубликовано: 28 авг. 2017
Источник: suse-cvrf

Описание

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

Security issues fixed:

  • CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826)
  • CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c (bsc#1042812)
  • CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289)
  • CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via acrafted file (bsc#1049072)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.2
ImageMagick-6.8.8.1-34.1
ImageMagick-devel-6.8.8.1-34.1
ImageMagick-devel-32bit-6.8.8.1-34.1
ImageMagick-doc-6.8.8.1-34.1
ImageMagick-extra-6.8.8.1-34.1
libMagick++-6_Q16-3-6.8.8.1-34.1
libMagick++-6_Q16-3-32bit-6.8.8.1-34.1
libMagick++-devel-6.8.8.1-34.1
libMagick++-devel-32bit-6.8.8.1-34.1
libMagickCore-6_Q16-1-6.8.8.1-34.1
libMagickCore-6_Q16-1-32bit-6.8.8.1-34.1
libMagickWand-6_Q16-1-6.8.8.1-34.1
libMagickWand-6_Q16-1-32bit-6.8.8.1-34.1
perl-PerlMagick-6.8.8.1-34.1
openSUSE Leap 42.3
ImageMagick-6.8.8.1-34.1
ImageMagick-devel-6.8.8.1-34.1
ImageMagick-devel-32bit-6.8.8.1-34.1
ImageMagick-doc-6.8.8.1-34.1
ImageMagick-extra-6.8.8.1-34.1
libMagick++-6_Q16-3-6.8.8.1-34.1
libMagick++-6_Q16-3-32bit-6.8.8.1-34.1
libMagick++-devel-6.8.8.1-34.1
libMagick++-devel-32bit-6.8.8.1-34.1
libMagickCore-6_Q16-1-6.8.8.1-34.1
libMagickCore-6_Q16-1-32bit-6.8.8.1-34.1
libMagickWand-6_Q16-1-6.8.8.1-34.1
libMagickWand-6_Q16-1-32bit-6.8.8.1-34.1
perl-PerlMagick-6.8.8.1-34.1

Ссылки

Описание

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.

Затронутые продукты
openSUSE Leap 42.2:ImageMagick-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-34.1
Ссылки

Описание

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.

Затронутые продукты
openSUSE Leap 42.2:ImageMagick-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-34.1
Ссылки

Описание

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.

Затронутые продукты
openSUSE Leap 42.2:ImageMagick-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-34.1
Ссылки

Описание

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.

Затронутые продукты
openSUSE Leap 42.2:ImageMagick-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-34.1
openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-34.1
Ссылки
Уязвимость openSUSE-SU-2017:2271-1