Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2019:2896-1 Moderate: ImageMagick Security Patch Details

suse
Calendar Grey November 5, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for ImageMagick ______________________________________________
An update that fixes 11 vulnerabilities is now available

Summary

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213). - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212). - CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211). - CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068). - CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065). - CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781). - CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782). - CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).

Topics%20covered

Topics Covered

security advisory moderate denial of service memory leak application crash SUSE ImageMagick

References

#1146065 #1146068 #1146211 #1146212 #1146213

#1151781 #1151782 #1151783 #1151784 #1151785

#1151786

Cross- CVE-2019-14980 CVE-2019-14981 CVE-2019-15139

CVE-2019-15140 CVE-2019-15141 CVE-2019-16708

CVE-2019-16709 CVE-2019-16710 CVE-2019-16711

CVE-2019-16712 CVE-2019-16713

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise Module for Development Tools 15-SP1

SUSE Linux Enterprise Module for Development Tools 15

SUSE Linux Enterprise Module for Desktop Applications 15-SP1

SUSE Linux Enterprise Module for Desktop Applications 15

https://www.suse.com/security/cve/CVE-2019-14980.html

https://www.suse.com/security/cve/CVE-2019-14981.html

Read the Full Advisory

Announcement ID: SUSE-SU-2019:2896-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service memory leak application crash SUSE ImageMagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here