Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0377-1

Опубликовано: 03 мар. 2021
Источник: suse-cvrf

Описание

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2021-20241 [bsc#1182335]: Division by zero in WriteJP2Image() in coders/jp2.c
  • CVE-2021-20243 [bsc#1182336]: Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  • CVE-2021-20244 [bsc#1182325]: Division by zero in ImplodeImage in MagickCore/visual-effects.c
  • CVE-2021-20246 [bsc#1182337]: Division by zero in ScaleResampleFilter in MagickCore/resample.c

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
ImageMagick-7.0.7.34-lp152.12.12.1
ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.12.1
ImageMagick-config-7-upstream-7.0.7.34-lp152.12.12.1
ImageMagick-devel-7.0.7.34-lp152.12.12.1
ImageMagick-devel-32bit-7.0.7.34-lp152.12.12.1
ImageMagick-doc-7.0.7.34-lp152.12.12.1
ImageMagick-extra-7.0.7.34-lp152.12.12.1
libMagick++-7_Q16HDRI4-7.0.7.34-lp152.12.12.1
libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp152.12.12.1
libMagick++-devel-7.0.7.34-lp152.12.12.1
libMagick++-devel-32bit-7.0.7.34-lp152.12.12.1
libMagickCore-7_Q16HDRI6-7.0.7.34-lp152.12.12.1
libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.12.1
libMagickWand-7_Q16HDRI6-7.0.7.34-lp152.12.12.1
libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.12.1
perl-PerlMagick-7.0.7.34-lp152.12.12.1

Ссылки

Описание

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Затронутые продукты
openSUSE Leap 15.2:ImageMagick-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-upstream-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-devel-32bit-7.0.7.34-lp152.12.12.1
Ссылки

Описание

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Затронутые продукты
openSUSE Leap 15.2:ImageMagick-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-upstream-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-devel-32bit-7.0.7.34-lp152.12.12.1
Ссылки

Описание

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Затронутые продукты
openSUSE Leap 15.2:ImageMagick-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-upstream-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-devel-32bit-7.0.7.34-lp152.12.12.1
Ссылки

Описание

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Затронутые продукты
openSUSE Leap 15.2:ImageMagick-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-config-7-upstream-7.0.7.34-lp152.12.12.1
openSUSE Leap 15.2:ImageMagick-devel-32bit-7.0.7.34-lp152.12.12.1
Ссылки