Security update for ImageMagick

Announcement ID:	SUSE-SU-2017:1599-1
Rating:	moderate
References:	bsc#1033091 bsc#1034870 bsc#1034872 bsc#1034876 bsc#1036976 bsc#1036978 bsc#1036980 bsc#1036981 bsc#1036983 bsc#1036984 bsc#1036985 bsc#1036986 bsc#1036987 bsc#1036988 bsc#1036989 bsc#1036990 bsc#1037527 bsc#1038000 bsc#1040025 bsc#1040303 bsc#1040304 bsc#1040306 bsc#1040332
Cross-References:	CVE-2014-9846 CVE-2016-10050 CVE-2017-7606 CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8348 CVE-2017-8349 CVE-2017-8350 CVE-2017-8351 CVE-2017-8352 CVE-2017-8353 CVE-2017-8354 CVE-2017-8355 CVE-2017-8357 CVE-2017-8765 CVE-2017-8830 CVE-2017-9098 CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144
CVSS scores:	CVE-2016-10050 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2016-10050 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2017-7606 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7941 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7942 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-7943 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8344 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8345 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8346 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8348 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8349 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8350 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8351 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8352 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8353 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8354 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8355 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8357 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8765 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-8830 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9098 ( SUSE ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2017-9098 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2017-9098 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2017-9141 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9141 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9141 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9142 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9142 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9142 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9143 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9143 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9143 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9144 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2017-9144 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2017-9144 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products:	SLES for SAP Applications 11-SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4

An update that solves 25 vulnerabilities can now be installed.

Description:

This update for ImageMagick fixes the following issues:

This security issue was fixed:

• CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034876).
• CVE-2017-8351: ImageMagick, GraphicsMagick: denial of service (memory leak) via a crafted file (ReadPCDImage func in pcd.c) (bsc#1036986).
• CVE-2017-8352: denial of service (memory leak) via a crafted file (ReadXWDImage func in xwd.c) (bsc#1036987)
• CVE-2017-8349: denial of service (memory leak) via a crafted file (ReadSFWImage func in sfw.c) (bsc#1036984)
• CVE-2017-8350: denial of service (memory leak) via a crafted file (ReadJNGImage function in png.c) (bsc#1036985)
• CVE-2017-8345: denial of service (memory leak) via a crafted file (ReadMNGImage func in png.c) (bsc#1036980)
• CVE-2017-8346: denial of service (memory leak) via a crafted file (ReadDCMImage func in dcm.c) (bsc#1036981)
• CVE-2017-8353: denial of service (memory leak) via a crafted file (ReadPICTImage func in pict.c) (bsc#1036988)
• CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c:1379) (bsc#1038000)
• CVE-2017-7606: denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033091)
• CVE-2017-8765: memory leak vulnerability via a crafted ICON file (ReadICONImage in coders\icon.c) (bsc#1037527)
• CVE-2017-8355: denial of service (memory leak) via a crafted file (ReadMTVImage func in mtv.c) (bsc#1036990)
• CVE-2017-8344: denial of service (memory leak) via a crafted file (ReadPCXImage func in pcx.c) (bsc#1036978)
• CVE-2017-9098: uninitialized memory usage in the ReadRLEImage RLE decoder function coders/rle.c (bsc#1040025)
• CVE-2017-9141: Missing checks in the ReadDDSImage function in coders/dds.c could lead to a denial of service (assertion) (bsc#1040303)
• CVE-2017-9142: Missing checks in theReadOneJNGImage function in coders/png.c could lead to denial of service (assertion) (bsc#1040304)
• CVE-2017-9143: A possible denial of service attack via crafted .art file in ReadARTImage function in coders/art.c (bsc#1040306)
• CVE-2017-9144: A crafted RLE image can trigger a crash in coders/rle.c could lead to a denial of service (crash) (bsc#1040332)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Software Development Kit 11 SP4
  zypper in -t patch sdksp4-ImageMagick-13152=1
• SUSE Linux Enterprise Server 11 SP4
  zypper in -t patch slessp4-ImageMagick-13152=1
• SLES for SAP Applications 11-SP4
  zypper in -t patch slessp4-ImageMagick-13152=1

Package List:

• SUSE Linux Enterprise Software Development Kit 11 SP4 (s390x x86_64 i586 ppc64 ia64)
  • perl-PerlMagick-6.4.3.6-7.77.1
  • libMagick++1-6.4.3.6-7.77.1
  • libMagick++-devel-6.4.3.6-7.77.1
  • ImageMagick-6.4.3.6-7.77.1
  • ImageMagick-devel-6.4.3.6-7.77.1
  • libMagickWand1-6.4.3.6-7.77.1
• SUSE Linux Enterprise Software Development Kit 11 SP4 (ppc64 s390x x86_64)
  • libMagickWand1-32bit-6.4.3.6-7.77.1
• SUSE Linux Enterprise Server 11 SP4 (s390x x86_64 i586 ppc64 ia64)
  • libMagickCore1-6.4.3.6-7.77.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64 s390x x86_64)
  • libMagickCore1-32bit-6.4.3.6-7.77.1
• SLES for SAP Applications 11-SP4 (ppc64 x86_64)
  • libMagickCore1-32bit-6.4.3.6-7.77.1
  • libMagickCore1-6.4.3.6-7.77.1

References:

• https://www.suse.com/security/cve/CVE-2014-9846.html
• https://www.suse.com/security/cve/CVE-2016-10050.html
• https://www.suse.com/security/cve/CVE-2017-7606.html
• https://www.suse.com/security/cve/CVE-2017-7941.html
• https://www.suse.com/security/cve/CVE-2017-7942.html
• https://www.suse.com/security/cve/CVE-2017-7943.html
• https://www.suse.com/security/cve/CVE-2017-8344.html
• https://www.suse.com/security/cve/CVE-2017-8345.html
• https://www.suse.com/security/cve/CVE-2017-8346.html
• https://www.suse.com/security/cve/CVE-2017-8348.html
• https://www.suse.com/security/cve/CVE-2017-8349.html
• https://www.suse.com/security/cve/CVE-2017-8350.html
• https://www.suse.com/security/cve/CVE-2017-8351.html
• https://www.suse.com/security/cve/CVE-2017-8352.html
• https://www.suse.com/security/cve/CVE-2017-8353.html
• https://www.suse.com/security/cve/CVE-2017-8354.html
• https://www.suse.com/security/cve/CVE-2017-8355.html
• https://www.suse.com/security/cve/CVE-2017-8357.html
• https://www.suse.com/security/cve/CVE-2017-8765.html
• https://www.suse.com/security/cve/CVE-2017-8830.html
• https://www.suse.com/security/cve/CVE-2017-9098.html
• https://www.suse.com/security/cve/CVE-2017-9141.html
• https://www.suse.com/security/cve/CVE-2017-9142.html
• https://www.suse.com/security/cve/CVE-2017-9143.html
• https://www.suse.com/security/cve/CVE-2017-9144.html
• https://bugzilla.suse.com/show_bug.cgi?id=1033091
• https://bugzilla.suse.com/show_bug.cgi?id=1034870
• https://bugzilla.suse.com/show_bug.cgi?id=1034872
• https://bugzilla.suse.com/show_bug.cgi?id=1034876
• https://bugzilla.suse.com/show_bug.cgi?id=1036976
• https://bugzilla.suse.com/show_bug.cgi?id=1036978
• https://bugzilla.suse.com/show_bug.cgi?id=1036980
• https://bugzilla.suse.com/show_bug.cgi?id=1036981
• https://bugzilla.suse.com/show_bug.cgi?id=1036983
• https://bugzilla.suse.com/show_bug.cgi?id=1036984
• https://bugzilla.suse.com/show_bug.cgi?id=1036985
• https://bugzilla.suse.com/show_bug.cgi?id=1036986
• https://bugzilla.suse.com/show_bug.cgi?id=1036987
• https://bugzilla.suse.com/show_bug.cgi?id=1036988
• https://bugzilla.suse.com/show_bug.cgi?id=1036989
• https://bugzilla.suse.com/show_bug.cgi?id=1036990
• https://bugzilla.suse.com/show_bug.cgi?id=1037527
• https://bugzilla.suse.com/show_bug.cgi?id=1038000
• https://bugzilla.suse.com/show_bug.cgi?id=1040025
• https://bugzilla.suse.com/show_bug.cgi?id=1040303
• https://bugzilla.suse.com/show_bug.cgi?id=1040304
• https://bugzilla.suse.com/show_bug.cgi?id=1040306
• https://bugzilla.suse.com/show_bug.cgi?id=1040332