Security update for ImageMagick SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3191-1 Final 1 1 2018-10-17T05:06:32Z current 2018-10-17T05:06:32Z 2018-10-17T05:06:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. (bsc#1111069) - CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072). - CVE-2018-17965: Fixed a memory leak in WriteSGIImage (bsc#1110747). - CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746). - CVE-2018-12600: ReadDIBImage and WriteDIBImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098545) - CVE-2018-12599: ReadBMPImage and WriteBMPImage allowed attackers to cause an out of bounds write via a crafted file. (bsc#1098546) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP3-2018-2287,SUSE-SLE-SDK-12-SP3-2018-2287,SUSE-SLE-SERVER-12-SP3-2018-2287,SUSE-SLE-WE-12-SP3-2018-2287 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ Link for SUSE-SU-2018:3191-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004682.html E-Mail link for SUSE-SU-2018:3191-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1098545 SUSE Bug 1098545 https://bugzilla.suse.com/1098546 SUSE Bug 1098546 https://bugzilla.suse.com/1110746 SUSE Bug 1110746 https://bugzilla.suse.com/1110747 SUSE Bug 1110747 https://bugzilla.suse.com/1111069 SUSE Bug 1111069 https://bugzilla.suse.com/1111072 SUSE Bug 1111072 https://www.suse.com/security/cve/CVE-2017-13058/ SUSE CVE CVE-2017-13058 page https://www.suse.com/security/cve/CVE-2018-12599/ SUSE CVE CVE-2018-12599 page https://www.suse.com/security/cve/CVE-2018-12600/ SUSE CVE CVE-2018-12600 page https://www.suse.com/security/cve/CVE-2018-17965/ SUSE CVE CVE-2018-17965 page https://www.suse.com/security/cve/CVE-2018-17966/ SUSE CVE CVE-2018-17966 page https://www.suse.com/security/cve/CVE-2018-18016/ SUSE CVE CVE-2018-18016 page https://www.suse.com/security/cve/CVE-2018-18024/ SUSE CVE CVE-2018-18024 page SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 ImageMagick-6.8.8.1-71.82.1 libMagick++-6_Q16-3-6.8.8.1-71.82.1 libMagickCore-6_Q16-1-6.8.8.1-71.82.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 libMagickWand-6_Q16-1-6.8.8.1-71.82.1 ImageMagick-devel-6.8.8.1-71.82.1 libMagick++-devel-6.8.8.1-71.82.1 perl-PerlMagick-6.8.8.1-71.82.1 ImageMagick-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagick++-6_Q16-3-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickCore-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickWand-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libMagickCore-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Server 12 SP3 libMagickWand-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Server 12 SP3 libMagickCore-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libMagickWand-6_Q16-1-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ImageMagick-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ImageMagick-devel-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libMagick++-6_Q16-3-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libMagick++-devel-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 perl-PerlMagick-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ImageMagick-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libMagick++-6_Q16-3-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file. CVE-2017-13058 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2017-13058.html CVE-2017-13058 https://bugzilla.suse.com/1055069 SUSE Bug 1055069 https://bugzilla.suse.com/1111072 SUSE Bug 1111072 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file. CVE-2018-12599 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-12599.html CVE-2018-12599 https://bugzilla.suse.com/1098546 SUSE Bug 1098546 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file. CVE-2018-12600 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-12600.html CVE-2018-12600 https://bugzilla.suse.com/1098545 SUSE Bug 1098545 https://bugzilla.suse.com/1098546 SUSE Bug 1098546 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c. CVE-2018-17965 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-17965.html CVE-2018-17965 https://bugzilla.suse.com/1110747 SUSE Bug 1110747 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. CVE-2018-17966 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-17966.html CVE-2018-17966 https://bugzilla.suse.com/1110746 SUSE Bug 1110746 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. CVE-2018-18016 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-18016.html CVE-2018-18016 https://bugzilla.suse.com/1111072 SUSE Bug 1111072 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. CVE-2018-18024 SUSE Linux Enterprise Desktop 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Desktop 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickCore-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libMagickWand-6_Q16-1-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:ImageMagick-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libMagick++-devel-6.8.8.1-71.82.1 SUSE Linux Enterprise Software Development Kit 12 SP3:perl-PerlMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:ImageMagick-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagick++-6_Q16-3-6.8.8.1-71.82.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libMagickCore-6_Q16-1-32bit-6.8.8.1-71.82.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183191-1/ https://www.suse.com/security/cve/CVE-2018-18024.html CVE-2018-18024 https://bugzilla.suse.com/1111069 SUSE Bug 1111069 https://bugzilla.suse.com/1117463 SUSE Bug 1117463