shield Security update for imagemagick

SUSE-SLE-WE-12-SP3-2018-2287

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. (bsc#1111069) - CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072). - CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747). - CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746). - CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098545) - CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098546)

• Release Date
  Oct 17 2018
• References
  Bugzilla: 1098546, 1098545, 1111072, 1111069, 1110747, 1110746
  CVEs: CVE-2018-12599, CVE-2018-17966, CVE-2018-17965, CVE-2018-12600, CVE-2017-13058, CVE-2018-18024, CVE-2018-18016
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 12.3 x86_64

• Packages
  ImageMagick
  Viewer and Converter for Images

  6.8.8.1-71.82.1

  lock rpm

  lock src

  libMagick++-6_Q16-3
  C++ Interface for ImageMagick - runtime library

  6.8.8.1-71.82.1

  lock rpm

  libMagickCore-6_Q16-1-32bit
  Viewer and Converter for Images - runtime library

  6.8.8.1-71.82.1

  lock rpm