This update for ImageMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11597: Fixed a heap-based buffer over-read in     the WriteTIFFImage() (bsc#1138464).

  - Fixed a file content disclosure via SVG and WMF decoding     (bsc#1138425).- CVE-2019-11472: Fixed a denial of     service in ReadXWDImage() (bsc#1133204).

  - CVE-2019-11470: Fixed a denial of service in     ReadCINImage() (bsc#1133205).

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the WriteMATLABImage() (bsc#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the WritePDBImage() (bsc#1133501).

  - CVE-2019-10131: Fixed a off-by-one read in     formatIPTCfromBuffer function in coders/meta.c     (bsc#1134075).

  - CVE-2017-12806: Fixed a denial of service through memory     exhaustion in format8BIM() (bsc#1135232).

  - CVE-2017-12805: Fixed a denial of service through memory     exhaustion in ReadTIFFImage() (bsc#1135236).

  - CVE-2019-11598: Fixed a heap-based buffer over-read in     WritePNMImage() (bsc#1136732) We also now disable PCL in     the -SUSE configuration, as it also uses ghostscript for     decoding (bsc#1136183)

This update was imported from the SUSE:SLE-12:Update update project.

Detections

Analytics

openSUSE Security Update : ImageMagick (openSUSE-2019-1683)

high Nessus Plugin ID 126438

Version 1.5