Security update for GraphicsMagick SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:13923-1 Final 1 1 2019-01-03T16:32:29Z current 2019-01-03T16:32:29Z 2019-01-03T16:32:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for GraphicsMagick This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage() (bsc#1113064). - CVE-2017-10794: Fixed buffer overflow in RGB TIFF picture processing (bsc#1112392). - CVE-2017-14997: Fixed integer underflow in ReadPICTImage in coders/pict.c (bsc#1112399). - CVE-2018-20185: Fixed heap-based buffer over-read in the ReadBMPImage function of bmp.c (bsc#1119823) - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c (bsc#1119822) Regressions fixed after security update: - CVE-2017-12663: Fixed memory leak in WriteMAPImage in coders/map.c (bsc#1052754). - CVE-2017-9405: Fixed memory leak in the ReadICONImage function (bsc#1042911). - CVE-2018-6405: Fixed ReadDCMImage function in coders/dcm (bsc#1078433). Non-security issues fixed: - debug_build: build more suitable for debugging The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-GraphicsMagick-13923,slestso13-GraphicsMagick-13923 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ Link for SUSE-SU-2019:13923-1 https://lists.suse.com/pipermail/sle-security-updates/2019-January/005014.html E-Mail link for SUSE-SU-2019:13923-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1042911 SUSE Bug 1042911 https://bugzilla.suse.com/1052754 SUSE Bug 1052754 https://bugzilla.suse.com/1078433 SUSE Bug 1078433 https://bugzilla.suse.com/1112392 SUSE Bug 1112392 https://bugzilla.suse.com/1112399 SUSE Bug 1112399 https://bugzilla.suse.com/1113064 SUSE Bug 1113064 https://bugzilla.suse.com/1119822 SUSE Bug 1119822 https://bugzilla.suse.com/1119823 SUSE Bug 1119823 https://www.suse.com/security/cve/CVE-2017-10794/ SUSE CVE CVE-2017-10794 page https://www.suse.com/security/cve/CVE-2017-12663/ SUSE CVE CVE-2017-12663 page https://www.suse.com/security/cve/CVE-2017-14997/ SUSE CVE CVE-2017-14997 page https://www.suse.com/security/cve/CVE-2017-9405/ SUSE CVE CVE-2017-9405 page https://www.suse.com/security/cve/CVE-2018-18544/ SUSE CVE CVE-2018-18544 page https://www.suse.com/security/cve/CVE-2018-20184/ SUSE CVE CVE-2018-20184 page https://www.suse.com/security/cve/CVE-2018-20185/ SUSE CVE CVE-2018-20185 page https://www.suse.com/security/cve/CVE-2018-6405/ SUSE CVE CVE-2018-6405 page SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 GraphicsMagick-1.2.5-78.78.1 libGraphicsMagick2-1.2.5-78.78.1 perl-GraphicsMagick-1.2.5-78.78.1 GraphicsMagick-1.2.5-78.78.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2-1.2.5-78.78.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick-1.2.5-78.78.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GraphicsMagick-1.2.5-78.78.1 as a component of SUSE Studio Onsite 1.3 libGraphicsMagick2-1.2.5-78.78.1 as a component of SUSE Studio Onsite 1.3 When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode. CVE-2017-10794 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2017-10794.html CVE-2017-10794 https://bugzilla.suse.com/1112392 SUSE Bug 1112392 ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. CVE-2017-12663 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2017-12663.html CVE-2017-12663 https://bugzilla.suse.com/1052754 SUSE Bug 1052754 GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. CVE-2017-14997 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2017-14997.html CVE-2017-14997 https://bugzilla.suse.com/1112399 SUSE Bug 1112399 https://bugzilla.suse.com/1117463 SUSE Bug 1117463 In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file. CVE-2017-9405 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2017-9405.html CVE-2017-9405 https://bugzilla.suse.com/1042911 SUSE Bug 1042911 There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. CVE-2018-18544 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2018-18544.html CVE-2018-18544 https://bugzilla.suse.com/1113064 SUSE Bug 1113064 In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification. CVE-2018-20184 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2018-20184.html CVE-2018-20184 https://bugzilla.suse.com/1119822 SUSE Bug 1119822 In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits. CVE-2018-20185 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2018-20185.html CVE-2018-20185 https://bugzilla.suse.com/1119823 SUSE Bug 1119823 In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service. CVE-2018-6405 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-78.78.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:GraphicsMagick-1.2.5-78.78.1 SUSE Studio Onsite 1.3:libGraphicsMagick2-1.2.5-78.78.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201913923-1/ https://www.suse.com/security/cve/CVE-2018-6405.html CVE-2018-6405 https://bugzilla.suse.com/1078433 SUSE Bug 1078433 https://bugzilla.suse.com/1095726 SUSE Bug 1095726