Security update for ImageMagick SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1275-1 Final 1 1 2016-05-11T11:51:45Z current 2016-05-11T11:51:45Z 2016-05-11T11:51:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable MAGICK_CODER_MODULE_PATH=/usr/lib64/ImageMagick-6.4.3/modules-Q16/coders/vulnerable/ (bsc#978061) - CVE-2016-3714: Insufficient shell characters filtering leads to (potentially remote) code execution - CVE-2016-3715: Possible file deletion by using ImageMagick's 'ephemeral' pseudo protocol which deletes files after reading. - CVE-2016-3716: Possible file moving by using ImageMagick's 'msl' pseudo protocol with any extension in any folder. - CVE-2016-3717: Possible local file read by using ImageMagick's 'label' pseudo protocol to get content of the files from the server. - CVE-2016-3718: Possible Server Side Request Forgery (SSRF) to make HTTP GET or FTP request. Bugs fixed: - Use external svg loader (rsvg) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-ImageMagick-12549,sleclo50sp3-ImageMagick-12549,sleman21-ImageMagick-12549,slemap21-ImageMagick-12549,slessp2-ImageMagick-12549,slessp3-ImageMagick-12549,slessp4-ImageMagick-12549 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ Link for SUSE-SU-2016:1275-1 https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html E-Mail link for SUSE-SU-2016:1275-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/978061 SUSE Bug 978061 https://www.suse.com/security/cve/CVE-2016-3714/ SUSE CVE CVE-2016-3714 page https://www.suse.com/security/cve/CVE-2016-3715/ SUSE CVE CVE-2016-3715 page https://www.suse.com/security/cve/CVE-2016-3716/ SUSE CVE CVE-2016-3716 page https://www.suse.com/security/cve/CVE-2016-3717/ SUSE CVE CVE-2016-3717 page https://www.suse.com/security/cve/CVE-2016-3718/ SUSE CVE CVE-2016-3718 page SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 ImageMagick-6.4.3.6-7.34.1 ImageMagick-devel-6.4.3.6-7.34.1 libMagick++-devel-6.4.3.6-7.34.1 libMagick++1-6.4.3.6-7.34.1 libMagickWand1-6.4.3.6-7.34.1 libMagickWand1-32bit-6.4.3.6-7.34.1 perl-PerlMagick-6.4.3.6-7.34.1 libMagickCore1-6.4.3.6-7.34.1 libMagickCore1-32bit-6.4.3.6-7.34.1 libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ImageMagick-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-devel-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++-devel-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-32bit-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-PerlMagick-6.4.3.6-7.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Manager 2.1 libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Manager 2.1 libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE Manager Proxy 2.1 libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE Manager Proxy 2.1 libMagickCore1-6.4.3.6-7.34.1 as a component of SUSE OpenStack Cloud 5 libMagickCore1-32bit-6.4.3.6-7.34.1 as a component of SUSE OpenStack Cloud 5 The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick." CVE-2016-3714 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-6.4.3.6-7.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ https://www.suse.com/security/cve/CVE-2016-3714.html CVE-2016-3714 https://bugzilla.suse.com/1000484 SUSE Bug 1000484 https://bugzilla.suse.com/1057163 SUSE Bug 1057163 https://bugzilla.suse.com/1105592 SUSE Bug 1105592 https://bugzilla.suse.com/978061 SUSE Bug 978061 https://bugzilla.suse.com/980401 SUSE Bug 980401 https://bugzilla.suse.com/982178 SUSE Bug 982178 The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. CVE-2016-3715 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-6.4.3.6-7.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ https://www.suse.com/security/cve/CVE-2016-3715.html CVE-2016-3715 https://bugzilla.suse.com/1000484 SUSE Bug 1000484 https://bugzilla.suse.com/1057163 SUSE Bug 1057163 https://bugzilla.suse.com/1105592 SUSE Bug 1105592 https://bugzilla.suse.com/978061 SUSE Bug 978061 The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image. CVE-2016-3716 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-6.4.3.6-7.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ https://www.suse.com/security/cve/CVE-2016-3716.html CVE-2016-3716 https://bugzilla.suse.com/1000484 SUSE Bug 1000484 https://bugzilla.suse.com/1057163 SUSE Bug 1057163 https://bugzilla.suse.com/1105592 SUSE Bug 1105592 https://bugzilla.suse.com/978061 SUSE Bug 978061 The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. CVE-2016-3717 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-6.4.3.6-7.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ https://www.suse.com/security/cve/CVE-2016-3717.html CVE-2016-3717 https://bugzilla.suse.com/1000484 SUSE Bug 1000484 https://bugzilla.suse.com/1057163 SUSE Bug 1057163 https://bugzilla.suse.com/1105592 SUSE Bug 1105592 https://bugzilla.suse.com/978061 SUSE Bug 978061 The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. CVE-2016-3718 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE Manager Proxy 2.1:libMagickCore1-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-32bit-6.4.3.6-7.34.1 SUSE OpenStack Cloud 5:libMagickCore1-6.4.3.6-7.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161275-1/ https://www.suse.com/security/cve/CVE-2016-3718.html CVE-2016-3718 https://bugzilla.suse.com/1000484 SUSE Bug 1000484 https://bugzilla.suse.com/1057163 SUSE Bug 1057163 https://bugzilla.suse.com/1105592 SUSE Bug 1105592 https://bugzilla.suse.com/978061 SUSE Bug 978061