Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

SUSE: 2017:2229-1 Important: GraphicsMagick Heap Overflow Risk

suse
Calendar Grey August 22, 2017
Dist Suse Esm H88
SUSE has issued a security patch for GraphicsMagick that tackles several urgent vulnerabilities aimed at bolstering system defenses. More information below.
An update that fixes 6 vulnerabilities is now available

Summary

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2017-8350: The PNG/JNG decoder recieved an incremental fix, fixing some related issues in the same code. (bsc#1036985) - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826) - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289) - CVE-2017-11403: The ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file (bsc#1049072) - CVE-2017-11643: A heap overflow in WriteCMYKImage()function in coders/cmyk.c was fixed (bsc#1050611) - CVE-2017-11636: A heap overflow in WriteRGBImage() in coders/rgb.c was fixed (bsc#1050674) Patch Instructions:

Topics%20covered

Topics Covered

security advisory denial of service critical update heap overflow SUSE GraphicsMagick

References

#1036985 #1042826 #1043289 #1049072 #1050611

#1050674

Cross- CVE-2017-11403 CVE-2017-11636 CVE-2017-11643

CVE-2017-8350 CVE-2017-9439 CVE-2017-9501

Affected Products:

SUSE Studio Onsite 1.3

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2017-11403.html

https://www.suse.com/security/cve/CVE-2017-11636.html

https://www.suse.com/security/cve/CVE-2017-11643.html

https://www.suse.com/security/cve/CVE-2017-8350.html

https://www.suse.com/security/cve/CVE-2017-9439.html

https://www.suse.com/security/cve/CVE-2017-9501.html

https://bugzilla.suse.com/1036985

https://bugzilla.suse.com/1042826

https://bugzilla.suse.com/1043289

https://bugzilla.suse.com/1049072

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2229-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service critical update heap overflow SUSE GraphicsMagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.