Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:1439-1

Опубликовано: 28 мая 2018
Источник: suse-cvrf

Описание

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues:

  • CVE-2017-18271: An infinite loop in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service was fixed. (boo#1094204)

Список пакетов

openSUSE Leap 42.3
GraphicsMagick-1.3.25-90.1
GraphicsMagick-devel-1.3.25-90.1
libGraphicsMagick++-Q16-12-1.3.25-90.1
libGraphicsMagick++-devel-1.3.25-90.1
libGraphicsMagick-Q16-3-1.3.25-90.1
libGraphicsMagick3-config-1.3.25-90.1
libGraphicsMagickWand-Q16-2-1.3.25-90.1
perl-GraphicsMagick-1.3.25-90.1

Описание

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file.


Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-90.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-90.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-90.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-90.1

Ссылки
Уязвимость openSUSE-SU-2018:1439-1