Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624) - CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626) - CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627) - CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for ImageMagick fixes the following issues: - CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624) - CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626) - CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627) - CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1184624
- https://bugzilla.suse.com/1184626
- https://bugzilla.suse.com/1184627
- https://bugzilla.suse.com/1184628
- https://www.suse.com/security/cve/CVE-2021-20309
- https://www.suse.com/security/cve/CVE-2021-20311
- https://www.suse.com/security/cve/CVE-2021-20312
- https://www.suse.com/security/cve/CVE-2021-20313
- https://www.suse.com/support/update/announcement/2021/suse-su-20211276-1/