Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: * CVE-2017-15033: A denial of service attack (memory leak) was fixed in ReadYUVImage in coders/yuv.c [bsc#1061873] * CVE-2017-11446: An infinite loop in ReadPESImage was fixed. (bsc#1049379) * CVE-2017-12433: A memory leak in ReadPESImage in coders/pes.c was fixed. (bsc#1052545) * CVE-2017-12428: A memory leak in ReadWMFImage in coders/wmf.c was fixed. (bsc#1052249) * CVE-2017-12431: A use-after-free in ReadWMFImage was fixed. (bsc#1052253) * CVE-2017-11534: A memory leak in the lite_font_map() in coders/wmf.c was fixed. (bsc#1050135) * CVE-2017-13133: A memory exhaustion in load_level function in coders/xcf.c was fixed. (bsc#1055219) * CVE-2017-13139: A out-of-bounds read in the ReadOneMNGImage was fixed. (bsc#1055430) This update also reverts an incorrect fix for CVE-2016-7530 [bsc#1054924].
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for ImageMagick fixes the following issues: Security issues fixed: * CVE-2017-15033: A denial of service attack (memory leak) was fixed in ReadYUVImage in coders/yuv.c [bsc#1061873] * CVE-2017-11446: An infinite loop in ReadPESImage was fixed. (bsc#1049379) * CVE-2017-12433: A memory leak in ReadPESImage in coders/pes.c was fixed. (bsc#1052545) * CVE-2017-12428: A memory leak in ReadWMFImage in coders/wmf.c was fixed. (bsc#1052249) * CVE-2017-12431: A use-after-free in ReadWMFImage was fixed. (bsc#1052253) * CVE-2017-11534: A memory leak in the lite_font_map() in coders/wmf.c was fixed. (bsc#1050135) * CVE-2017-13133: A memory exhaustion in load_level function in coders/xcf.c was fixed. (bsc#1055219) * CVE-2017-13139: A out-of-bounds read in the ReadOneMNGImage was fixed. (bsc#1055430) This update also reverts an incorrect fix for CVE-2016-7530 [bsc#1054924].
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1049379
- https://bugzilla.suse.com/1050135
- https://bugzilla.suse.com/1052249
- https://bugzilla.suse.com/1052253
- https://bugzilla.suse.com/1052545
- https://bugzilla.suse.com/1054924
- https://bugzilla.suse.com/1055219
- https://bugzilla.suse.com/1055430
- https://bugzilla.suse.com/1061873
- https://www.suse.com/security/cve/CVE-2016-7530
- https://www.suse.com/security/cve/CVE-2017-11446
- https://www.suse.com/security/cve/CVE-2017-11534
- https://www.suse.com/security/cve/CVE-2017-12428
- https://www.suse.com/security/cve/CVE-2017-12431
- https://www.suse.com/security/cve/CVE-2017-12433
- https://www.suse.com/security/cve/CVE-2017-13133
- https://www.suse.com/security/cve/CVE-2017-13139
- https://www.suse.com/security/cve/CVE-2017-15033
- https://www.suse.com/support/update/announcement/2017/suse-su-20172949-1/