Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

SUSE: 2017:2199-1 Important: ImageMagick Memory Leak And DoS

suse
Calendar Grey August 17, 2017
Dist Suse Esm H88
Maintain security with crucial SUSE patch for ImageMagick, addressing various vulnerabilities. Safeguard your system!
An update that fixes four vulnerabilities is now available

Summary

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826) - CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c (bsc#1042812) - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289) - CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via acrafted file (bsc#1049072) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2017-1343=1

Topics%20covered

Topics Covered

security advisory denial of service security fix important memory leak suse imagemagick

References

#1042812 #1042826 #1043289 #1049072

Cross- CVE-2017-11403 CVE-2017-9439 CVE-2017-9440

CVE-2017-9501

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP3

SUSE Linux Enterprise Workstation Extension 12-SP2

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Software Development Kit 12-SP2

SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Server 12-SP2

SUSE Linux Enterprise Desktop 12-SP3

SUSE Linux Enterprise Desktop 12-SP2

https://www.suse.com/security/cve/CVE-2017-11403.html

https://www.suse.com/security/cve/CVE-2017-9439.html

https://www.suse.com/security/cve/CVE-2017-9440.html

https://www.suse.com/security/cve/CVE-2017-9501.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2199-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security fix important memory leak suse imagemagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.