Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

openSUSE Leap 15.0: 2019:2519-1 Moderate: ImageMagick Issues Fixed

opensuse
Calendar Grey November 16, 2019
Dist Opensuse Esm H88
This patch provides essential remedies for 11 security flaws in ImageMagick on openSUSE Leap 15.0. Apply it now!
An update that fixes 11 vulnerabilities is now available.

Description

This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage

(bsc#1146213).

- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser

(bsc#1146212).

- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the

MeanShiftImage function (bsc#1146211).

- CVE-2019-14980: Fixed an application crash resulting from a heap-based

buffer over-read in WriteTIFFImage (bsc#1146068).

- CVE-2019-14981: Fixed a use after free in the UnmapBlob function

(bsc#1146065).

- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).

- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).

- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).

- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in

coders/ps2.c (bsc#1151784).

- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update moderate severity memory leak denial-of-service ImageMagick openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.0:

zypper in -t patch openSUSE-2019-2519=1

Package List

- openSUSE Leap 15.0 (i586 x86_64):

ImageMagick-7.0.7.34-lp150.2.41.1

ImageMagick-config-7-SUSE-7.0.7.34-lp150.2.41.1

ImageMagick-config-7-upstream-7.0.7.34-lp150.2.41.1

ImageMagick-debuginfo-7.0.7.34-lp150.2.41.1

ImageMagick-debugsource-7.0.7.34-lp150.2.41.1

ImageMagick-devel-7.0.7.34-lp150.2.41.1

ImageMagick-extra-7.0.7.34-lp150.2.41.1

ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.41.1

libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.41.1

libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.41.1

libMagick++-devel-7.0.7.34-lp150.2.41.1

libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.41.1

libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1

libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.41.1

libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.41.1

perl-PerlMagick-7.0.7.34-lp150.2.41.1

perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.41.1

- openSUSE Leap 15.0 (noarch):

ImageMagick-doc-7.0.7.34-lp150.2.41.1

- openSUSE Leap 15.0 (x86_64):

ImageMagick-devel-32bit-7.0.7.34-lp150.2.41.1

libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.41.1

li...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2019-14980.html

https://www.suse.com/security/cve/CVE-2019-14981.html

https://www.suse.com/security/cve/CVE-2019-15139.html

https://www.suse.com/security/cve/CVE-2019-15140.html

https://www.suse.com/security/cve/CVE-2019-15141.html

https://www.suse.com/security/cve/CVE-2019-16708.html

https://www.suse.com/security/cve/CVE-2019-16709.html

https://www.suse.com/security/cve/CVE-2019-16710.html

https://www.suse.com/security/cve/CVE-2019-16711.html

https://www.suse.com/security/cve/CVE-2019-16712.html

https://www.suse.com/security/cve/CVE-2019-16713.html

https://bugzilla.suse.com/1146065

https://bugzilla.suse.com/1146068

https://bugzilla.suse.com/1146211

https://bugzilla.suse.com/1146212

https://bugzilla.suse.com/1146213

https://bugzilla.suse.com/1151781

https://bugzilla.suse.com/1151782

https://bugzilla.suse.com/1151783

https://bugzilla.suse.com/1151784

https://bugzilla.suse.com/1151785

https://bugzilla.suse.com/1151786

--

Announcement ID: openSUSE-SU-2019:2519-1
Rating: moderate
Affected Products: openSUSE Leap 15.0

Topics%20covered

Topics Covered

security advisory update moderate severity memory leak denial-of-service ImageMagick openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here