Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

SUSE: 2017:2176-1 Important: ImageMagick Denial Of Service

suse
Calendar Grey August 16, 2017
Dist Suse Esm H88
A crucial software patch released for ImageMagick addressing several vulnerabilities. Ensure your SUSE machines are up to date immediately!
An update that fixes three vulnerabilities is now available

Summary

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826) - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289) - CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via acrafted file (bsc#1049072) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-ImageMagick-13232=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-ImageMagick-13232=1 - SUSE Linux Enterprise Debuginfo 11-SP4:

Topics%20covered

Topics Covered

security advisory denial of service update important suse imagemagick

References

#1042826 #1043289 #1049072

Cross- CVE-2017-11403 CVE-2017-9439 CVE-2017-9501

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2017-11403.html

https://www.suse.com/security/cve/CVE-2017-9439.html

https://www.suse.com/security/cve/CVE-2017-9501.html

https://bugzilla.suse.com/1042826

https://bugzilla.suse.com/1043289

https://bugzilla.suse.com/1049072

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2176-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service update important suse imagemagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.