Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0328-1

Опубликовано: 31 янв. 2018
Источник: suse-cvrf

Описание

Security update for GraphicsMagick

This update for GraphicsMagick fixes several issues.

These security issues were fixed:

  • CVE-2017-13065: Prevent NULL pointer dereference in the function SVGStartElement (bsc#1055038)
  • CVE-2018-5685: Prevent infinite loop and application hang in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value (bsc#1075939)
  • CVE-2017-18029: Prevent memory leak in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file (bsc#1076021).
  • CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file (bsc#1076051).

Список пакетов

openSUSE Leap 42.3
GraphicsMagick-1.3.25-63.1
GraphicsMagick-devel-1.3.25-63.1
libGraphicsMagick++-Q16-12-1.3.25-63.1
libGraphicsMagick++-devel-1.3.25-63.1
libGraphicsMagick-Q16-3-1.3.25-63.1
libGraphicsMagick3-config-1.3.25-63.1
libGraphicsMagickWand-Q16-2-1.3.25-63.1
perl-GraphicsMagick-1.3.25-63.1

Ссылки

Описание

GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-63.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-63.1
Ссылки

Описание

GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-63.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-63.1
Ссылки

Описание

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-63.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-63.1
Ссылки

Описание

In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-63.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-63.1
Ссылки

Описание

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-63.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-63.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-63.1
Ссылки
Уязвимость openSUSE-SU-2018:0328-1