shield Security update for imagemagick

SUSE-SLE-SDK-12-SP3-2017-1828

This update for ImageMagick fixes the following issues: Security issues fixed: * CVE-2017-15033: A denial of service attack (memory leak) was fixed in ReadYUVImage in coders/yuv.c [bsc#1061873] * CVE-2017-11446: An infinite loop in ReadPESImage was fixed. (bsc#1049379) * CVE-2017-12433: A memory leak in ReadPESImage in coders/pes.c was fixed. (bsc#1052545) * CVE-2017-12428: A memory leak in ReadWMFImage in coders/wmf.c was fixed. (bsc#1052249) * CVE-2017-12431: A use-after-free in ReadWMFImage was fixed. (bsc#1052253) * CVE-2017-11534: A memory leak in the lite_font_map() in coders/wmf.c was fixed. (bsc#1050135) * CVE-2017-13133: A memory exhaustion in load_level function in coders/xcf.c was fixed. (bsc#1055219) * CVE-2017-13139: A out-of-bounds read in the ReadOneMNGImage was fixed. (bsc#1055430) This update also reverts an incorrect fix for CVE-2016-7530 [bsc#1054924].

• Release Date
  Nov 8 2017
• References
  Bugzilla: 1054924, 1061873, 1049379, 1050135, 1052249, 1052253, 1052545, 1055219, 1055430
  CVEs: CVE-2016-7530, CVE-2017-11446, CVE-2017-11534, CVE-2017-12428, CVE-2017-12431, CVE-2017-12433, CVE-2017-13133, CVE-2017-13139, CVE-2017-15033
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  ImageMagick
  Viewer and Converter for Images

  6.8.8.1-71.12.1 lock rpm lock src

  ImageMagick-devel
  Include Files and Libraries Mandatory for Development

  6.8.8.1-71.12.1 lock rpm

  libMagick++-6_Q16-3
  C++ Interface for ImageMagick - runtime library

  6.8.8.1-71.12.1 lock rpm

  libMagick++-devel
  C++ Interface for ImageMagick - files mandatory for development

  6.8.8.1-71.12.1 lock rpm

  perl-PerlMagick
  Perl interface for ImageMagick

  6.8.8.1-71.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  ImageMagick
  Viewer and Converter for Images

  6.8.8.1-71.12.1 lock rpm lock src

  ImageMagick-devel
  Include Files and Libraries Mandatory for Development

  6.8.8.1-71.12.1 lock rpm

  libMagick++-6_Q16-3
  C++ Interface for ImageMagick - runtime library

  6.8.8.1-71.12.1 lock rpm

  libMagick++-devel
  C++ Interface for ImageMagick - files mandatory for development

  6.8.8.1-71.12.1 lock rpm

  perl-PerlMagick
  Perl interface for ImageMagick

  6.8.8.1-71.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  ImageMagick
  Viewer and Converter for Images

  6.8.8.1-71.12.1 lock rpm lock src

  ImageMagick-devel
  Include Files and Libraries Mandatory for Development

  6.8.8.1-71.12.1 lock rpm

  libMagick++-6_Q16-3
  C++ Interface for ImageMagick - runtime library

  6.8.8.1-71.12.1 lock rpm

  libMagick++-devel
  C++ Interface for ImageMagick - files mandatory for development

  6.8.8.1-71.12.1 lock rpm

  perl-PerlMagick
  Perl interface for ImageMagick

  6.8.8.1-71.12.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  ImageMagick
  Viewer and Converter for Images

  6.8.8.1-71.12.1 lock rpm lock src

  ImageMagick-devel
  Include Files and Libraries Mandatory for Development

  6.8.8.1-71.12.1 lock rpm

  libMagick++-6_Q16-3
  C++ Interface for ImageMagick - runtime library

  6.8.8.1-71.12.1 lock rpm

  libMagick++-devel
  C++ Interface for ImageMagick - files mandatory for development

  6.8.8.1-71.12.1 lock rpm

  perl-PerlMagick
  Perl interface for ImageMagick

  6.8.8.1-71.12.1 lock rpm