Security update for ImageMagick

Announcement ID:	SUSE-SU-2017:1489-1
Rating:	moderate
References:	bsc#1028075 bsc#1033091 bsc#1034870 bsc#1034872 bsc#1034876 bsc#1036976 bsc#1036977 bsc#1036978 bsc#1036980 bsc#1036981 bsc#1036982 bsc#1036983 bsc#1036984 bsc#1036985 bsc#1036986 bsc#1036987 bsc#1036988 bsc#1036989 bsc#1036990 bsc#1036991 bsc#1037527 bsc#1038000 bsc#1040025 bsc#1040303 bsc#1040304 bsc#1040306 bsc#1040332
Cross-References:	CVE-2017-6502 CVE-2017-7606 CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8343 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8347 CVE-2017-8348 CVE-2017-8349 CVE-2017-8350 CVE-2017-8351 CVE-2017-8352 CVE-2017-8353 CVE-2017-8354 CVE-2017-8355 CVE-2017-8356 CVE-2017-8357 CVE-2017-8765 CVE-2017-8830 CVE-2017-9098 CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
CVSS scores:	CVE-2017-6502 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7606 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7941 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7942 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7943 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8343 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8344 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8345 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8346 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8347 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8348 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8349 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8350 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8351 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8352 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8353 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8354 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8355 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8356 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8357 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8765 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8830 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9098 ( SUSE ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2017-9098 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2017-9098 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2017-9141 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9141 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9141 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9142 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9142 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9142 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9143 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9143 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9143 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9144 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9144 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9144 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products:	SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP2 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 SUSE Linux Enterprise Software Development Kit 12 12-SP2 SUSE Linux Enterprise Workstation Extension 12 SP2

An update that solves 27 vulnerabilities can now be installed.

Description:

This update for ImageMagick fixes the following issues:

Security issues fixed:

• CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file (bsc#1028075).
• CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034870). Note that this only impacts the built-in SVG implementation. As we use the librsgv implementation, we are not affected.
• CVE-2017-7942: The ReadAVSImage function in avs.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034872).
• CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034876).
• CVE-2017-8351: ImageMagick, GraphicsMagick: denial of service (memory leak) via a crafted file (ReadPCDImage func in pcd.c) (bsc#1036986).
• CVE-2017-8352: denial of service (memory leak) via a crafted file (ReadXWDImage func in xwd.c) (bsc#1036987)
• CVE-2017-8349: denial of service (memory leak) via a crafted file (ReadSFWImage func in sfw.c) (bsc#1036984)
• CVE-2017-8350: denial of service (memory leak) via a crafted file (ReadJNGImage function in png.c) (bsc#1036985)
• CVE-2017-8347: denial of service (memory leak) via a crafted file (ReadEXRImage func in exr.c) (bsc#1036982)
• CVE-2017-8348: denial of service (memory leak) via a crafted file (ReadMATImage func in mat.c) (bsc#1036983)
• CVE-2017-8345: denial of service (memory leak) via a crafted file (ReadMNGImage func in png.c) (bsc#1036980)
• CVE-2017-8346: denial of service (memory leak) via a crafted file (ReadDCMImage func in dcm.c) (bsc#1036981)
• CVE-2017-8353: denial of service (memory leak) via a crafted file (ReadPICTImage func in pict.c) (bsc#1036988)
• CVE-2017-8354: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c) (bsc#1036989)
• CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c:1379) (bsc#1038000)
• CVE-2017-7606: denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033091)
• CVE-2017-8765: memory leak vulnerability via a crafted ICON file (ReadICONImage in coders\icon.c) (bsc#1037527)
• CVE-2017-8356: denial of service (memory leak) via a crafted file (ReadSUNImage function in sun.c) (bsc#1036991)
• CVE-2017-8355: denial of service (memory leak) via a crafted file (ReadMTVImage func in mtv.c) (bsc#1036990)
• CVE-2017-8344: denial of service (memory leak) via a crafted file (ReadPCXImage func in pcx.c) (bsc#1036978)
• CVE-2017-8343: denial of service (memory leak) via a crafted file (ReadAAIImage func in aai.c) (bsc#1036977)
• CVE-2017-8357: denial of service (memory leak) via a crafted file (ReadEPTImage func in ept.c) (bsc#1036976)
• CVE-2017-9098: uninitialized memory usage in the ReadRLEImage RLE decoder function coders/rle.c (bsc#1040025)
• CVE-2017-9141: Missing checks in the ReadDDSImage function in coders/dds.c could lead to a denial of service (assertion) (bsc#1040303)
• CVE-2017-9142: Missing checks in theReadOneJNGImage function in coders/png.c could lead to denial of service (assertion) (bsc#1040304)
• CVE-2017-9143: A possible denial of service attack via crafted .art file in ReadARTImage function in coders/art.c (bsc#1040306)
• CVE-2017-9144: A crafted RLE image can trigger a crash in coders/rle.c could lead to a denial of service (crash) (bsc#1040332)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Desktop 12 SP2
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-917=1
• SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2
  zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-917=1
• SUSE Linux Enterprise Software Development Kit 12 12-SP2
  zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-917=1
• SUSE Linux Enterprise High Performance Computing 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-917=1
• SUSE Linux Enterprise Server 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-917=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-917=1
• SUSE Linux Enterprise Workstation Extension 12 SP2
  zypper in -t patch SUSE-SLE-WE-12-SP2-2017-917=1

Package List:

• SUSE Linux Enterprise Desktop 12 SP2 (x86_64)
  • libMagickCore-6_Q16-1-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1
  • ImageMagick-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagick++-6_Q16-3-debuginfo-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-debuginfo-6.8.8.1-70.1
  • libMagick++-6_Q16-3-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-70.1
• SUSE Linux Enterprise Server for the Raspberry Pi 12-SP2 (aarch64)
  • libMagickCore-6_Q16-1-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-debuginfo-6.8.8.1-70.1
• SUSE Linux Enterprise Software Development Kit 12 12-SP2 (aarch64 ppc64le s390x x86_64)
  • perl-PerlMagick-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • ImageMagick-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagick++-devel-6.8.8.1-70.1
  • perl-PerlMagick-debuginfo-6.8.8.1-70.1
  • ImageMagick-devel-6.8.8.1-70.1
  • libMagick++-6_Q16-3-debuginfo-6.8.8.1-70.1
  • libMagick++-6_Q16-3-6.8.8.1-70.1
• SUSE Linux Enterprise High Performance Computing 12 SP2 (aarch64 x86_64)
  • libMagickCore-6_Q16-1-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-debuginfo-6.8.8.1-70.1
• SUSE Linux Enterprise Server 12 SP2 (aarch64 ppc64le s390x x86_64)
  • libMagickCore-6_Q16-1-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-debuginfo-6.8.8.1-70.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2 (ppc64le x86_64)
  • libMagickCore-6_Q16-1-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-6.8.8.1-70.1
  • ImageMagick-debugsource-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-6.8.8.1-70.1
  • libMagickWand-6_Q16-1-debuginfo-6.8.8.1-70.1
• SUSE Linux Enterprise Workstation Extension 12 SP2 (x86_64)
  • ImageMagick-debugsource-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1
  • ImageMagick-6.8.8.1-70.1
  • ImageMagick-debuginfo-6.8.8.1-70.1
  • libMagick++-6_Q16-3-debuginfo-6.8.8.1-70.1
  • libMagick++-6_Q16-3-6.8.8.1-70.1
  • libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-70.1

References:

• https://www.suse.com/security/cve/CVE-2017-6502.html
• https://www.suse.com/security/cve/CVE-2017-7606.html
• https://www.suse.com/security/cve/CVE-2017-7941.html
• https://www.suse.com/security/cve/CVE-2017-7942.html
• https://www.suse.com/security/cve/CVE-2017-7943.html
• https://www.suse.com/security/cve/CVE-2017-8343.html
• https://www.suse.com/security/cve/CVE-2017-8344.html
• https://www.suse.com/security/cve/CVE-2017-8345.html
• https://www.suse.com/security/cve/CVE-2017-8346.html
• https://www.suse.com/security/cve/CVE-2017-8347.html
• https://www.suse.com/security/cve/CVE-2017-8348.html
• https://www.suse.com/security/cve/CVE-2017-8349.html
• https://www.suse.com/security/cve/CVE-2017-8350.html
• https://www.suse.com/security/cve/CVE-2017-8351.html
• https://www.suse.com/security/cve/CVE-2017-8352.html
• https://www.suse.com/security/cve/CVE-2017-8353.html
• https://www.suse.com/security/cve/CVE-2017-8354.html
• https://www.suse.com/security/cve/CVE-2017-8355.html
• https://www.suse.com/security/cve/CVE-2017-8356.html
• https://www.suse.com/security/cve/CVE-2017-8357.html
• https://www.suse.com/security/cve/CVE-2017-8765.html
• https://www.suse.com/security/cve/CVE-2017-8830.html
• https://www.suse.com/security/cve/CVE-2017-9098.html
• https://www.suse.com/security/cve/CVE-2017-9141.html
• https://www.suse.com/security/cve/CVE-2017-9142.html
• https://www.suse.com/security/cve/CVE-2017-9143.html
• https://www.suse.com/security/cve/CVE-2017-9144.html
• https://bugzilla.suse.com/show_bug.cgi?id=1028075
• https://bugzilla.suse.com/show_bug.cgi?id=1033091
• https://bugzilla.suse.com/show_bug.cgi?id=1034870
• https://bugzilla.suse.com/show_bug.cgi?id=1034872
• https://bugzilla.suse.com/show_bug.cgi?id=1034876
• https://bugzilla.suse.com/show_bug.cgi?id=1036976
• https://bugzilla.suse.com/show_bug.cgi?id=1036977
• https://bugzilla.suse.com/show_bug.cgi?id=1036978
• https://bugzilla.suse.com/show_bug.cgi?id=1036980
• https://bugzilla.suse.com/show_bug.cgi?id=1036981
• https://bugzilla.suse.com/show_bug.cgi?id=1036982
• https://bugzilla.suse.com/show_bug.cgi?id=1036983
• https://bugzilla.suse.com/show_bug.cgi?id=1036984
• https://bugzilla.suse.com/show_bug.cgi?id=1036985
• https://bugzilla.suse.com/show_bug.cgi?id=1036986
• https://bugzilla.suse.com/show_bug.cgi?id=1036987
• https://bugzilla.suse.com/show_bug.cgi?id=1036988
• https://bugzilla.suse.com/show_bug.cgi?id=1036989
• https://bugzilla.suse.com/show_bug.cgi?id=1036990
• https://bugzilla.suse.com/show_bug.cgi?id=1036991
• https://bugzilla.suse.com/show_bug.cgi?id=1037527
• https://bugzilla.suse.com/show_bug.cgi?id=1038000
• https://bugzilla.suse.com/show_bug.cgi?id=1040025
• https://bugzilla.suse.com/show_bug.cgi?id=1040303
• https://bugzilla.suse.com/show_bug.cgi?id=1040304
• https://bugzilla.suse.com/show_bug.cgi?id=1040306
• https://bugzilla.suse.com/show_bug.cgi?id=1040332