Security update for ImageMagick SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1129-1 Final 1 1 2018-05-02T13:50:19Z current 2018-05-02T13:50:19Z 2018-05-02T13:50:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ImageMagick This update for ImageMagick fixes the following issues: - security update (png.c) * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. Attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. [bsc#1086773] * CVE-2018-10177: there is an infinite loop in the ReadOneMNGImagefunction of the coders/png.c file. Remote attackers could leverage thisvulnerability to cause a denial of service (bsc#1089781) - security update (wand) * CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow attackers to cause a denial of service via a crafted file. [bsc#1087033] - security update (gif.c) * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027] - security update (core) * CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c could allow attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356] - security update (pcd.c) * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which could lead to a denial of service via a crafted file. [bsc#1087037] - security update (gif.c) * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027] - security update (tiff.c) * CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in ImageMagick memory allocation issue could lead to denial of service (bsc#1086782) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-ImageMagick-13586,slessp4-ImageMagick-13586 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ Link for SUSE-SU-2018:1129-1 https://lists.suse.com/pipermail/sle-security-updates/2018-May/003971.html E-Mail link for SUSE-SU-2018:1129-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1047356 SUSE Bug 1047356 https://bugzilla.suse.com/1086773 SUSE Bug 1086773 https://bugzilla.suse.com/1086782 SUSE Bug 1086782 https://bugzilla.suse.com/1087027 SUSE Bug 1087027 https://bugzilla.suse.com/1087033 SUSE Bug 1087033 https://bugzilla.suse.com/1087037 SUSE Bug 1087037 https://bugzilla.suse.com/1089781 SUSE Bug 1089781 https://www.suse.com/security/cve/CVE-2017-1000476/ SUSE CVE CVE-2017-1000476 page https://www.suse.com/security/cve/CVE-2017-10928/ SUSE CVE CVE-2017-10928 page https://www.suse.com/security/cve/CVE-2017-18251/ SUSE CVE CVE-2017-18251 page https://www.suse.com/security/cve/CVE-2017-18252/ SUSE CVE CVE-2017-18252 page https://www.suse.com/security/cve/CVE-2017-18254/ SUSE CVE CVE-2017-18254 page https://www.suse.com/security/cve/CVE-2018-10177/ SUSE CVE CVE-2018-10177 page https://www.suse.com/security/cve/CVE-2018-8960/ SUSE CVE CVE-2018-8960 page https://www.suse.com/security/cve/CVE-2018-9018/ SUSE CVE CVE-2018-9018 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-6.4.3.6-78.45.1 ImageMagick-devel-6.4.3.6-78.45.1 libMagick++-devel-6.4.3.6-78.45.1 libMagick++1-6.4.3.6-78.45.1 libMagickWand1-6.4.3.6-78.45.1 libMagickWand1-32bit-6.4.3.6-78.45.1 perl-PerlMagick-6.4.3.6-78.45.1 libMagickCore1-6.4.3.6-78.45.1 libMagickCore1-32bit-6.4.3.6-78.45.1 libMagickCore1-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Server 11 SP4 libMagickCore1-32bit-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Server 11 SP4 libMagickCore1-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libMagickCore1-32bit-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ImageMagick-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-devel-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++-devel-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++1-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-32bit-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-PerlMagick-6.4.3.6-78.45.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2017-1000476.html CVE-2017-1000476 https://bugzilla.suse.com/1074610 SUSE Bug 1074610 In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c. CVE-2017-10928 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2017-10928.html CVE-2017-10928 https://bugzilla.suse.com/1047356 SUSE Bug 1047356 https://bugzilla.suse.com/1047359 SUSE Bug 1047359 https://bugzilla.suse.com/1056277 SUSE Bug 1056277 https://bugzilla.suse.com/1060176 SUSE Bug 1060176 https://bugzilla.suse.com/1096261 SUSE Bug 1096261 An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file. CVE-2017-18251 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2017-18251.html CVE-2017-18251 https://bugzilla.suse.com/1087037 SUSE Bug 1087037 An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file. CVE-2017-18252 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2017-18252.html CVE-2017-18252 https://bugzilla.suse.com/1087033 SUSE Bug 1087033 An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file. CVE-2017-18254 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2017-18254.html CVE-2017-18254 https://bugzilla.suse.com/1087027 SUSE Bug 1087027 In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file. CVE-2018-10177 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2018-10177.html CVE-2018-10177 https://bugzilla.suse.com/1089781 SUSE Bug 1089781 The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read. CVE-2018-8960 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2018-8960.html CVE-2018-8960 https://bugzilla.suse.com/1086782 SUSE Bug 1086782 In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. CVE-2018-9018 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libMagickCore1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-78.45.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-78.45.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/ https://www.suse.com/security/cve/CVE-2018-9018.html CVE-2018-9018 https://bugzilla.suse.com/1086773 SUSE Bug 1086773