Lucene search

CentOS ProjectCESA-2020:1180

HistoryApr 08, 2020 - 5:42 p.m.

ImageMagick, autotrace, emacs, inkscape security update

2020-04-0817:42:49

CentOS Project

lists.centos.org

139

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.049

Percentile

93.0%

JSON

CentOS Errata and Security Advisory CESA-2020:1180

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

The following packages have been upgraded to a later upstream version: ImageMagick (6.9.10.68). (BZ#1764595)

Security Fix(es):

ImageMagick: multiple security vulnerabilities (CVE-2018-12599, CVE-2018-12600, CVE-2019-9956, CVE-2019-11597, CVE-2019-11598, CVE-2019-12974, CVE-2019-12978, CVE-2019-12979, CVE-2019-13135, CVE-2019-13295, CVE-2019-13297, CVE-2019-13300, CVE-2019-13301, CVE-2019-13304, CVE-2019-13305, CVE-2019-13306, CVE-2019-13307, CVE-2019-15139, CVE-2019-15140, CVE-2019-15141, CVE-2019-17540, CVE-2019-17541, CVE-2019-19948, CVE-2017-11166, CVE-2017-12805, CVE-2017-12806, CVE-2017-18251, CVE-2017-18252, CVE-2017-18254, CVE-2017-18271, CVE-2017-18273, CVE-2017-1000476, CVE-2018-8804, CVE-2018-9133, CVE-2018-10177, CVE-2018-10804, CVE-2018-10805, CVE-2018-11656, CVE-2018-13153, CVE-2018-14434, CVE-2018-14435, CVE-2018-14436, CVE-2018-14437, CVE-2018-15607, CVE-2018-16328, CVE-2018-16749, CVE-2018-16750, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175, CVE-2019-7397, CVE-2019-7398, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-12975, CVE-2019-12976, CVE-2019-13133, CVE-2019-13134, CVE-2019-13309, CVE-2019-13310, CVE-2019-13311, CVE-2019-13454, CVE-2019-14980, CVE-2019-14981, CVE-2019-16708, CVE-2019-16709, CVE-2019-16710, CVE-2019-16711, CVE-2019-16712, CVE-2019-16713, CVE-2019-19949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032480.html
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032508.html
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032537.html
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032540.html

Affected packages:
ImageMagick
ImageMagick-c++
ImageMagick-c+±devel
ImageMagick-devel
ImageMagick-doc
ImageMagick-perl
autotrace
autotrace-devel
emacs
emacs-common
emacs-el
emacs-filesystem
emacs-nox
emacs-terminal
inkscape
inkscape-docs
inkscape-view

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:1180

OSVersionArchitecturePackageVersionFilename
CentOS7i686autotrace< 0.31.1-38.el7autotrace-0.31.1-38.el7.i686.rpm
CentOS7x86_64autotrace< 0.31.1-38.el7autotrace-0.31.1-38.el7.x86_64.rpm
CentOS7i686autotrace-devel< 0.31.1-38.el7autotrace-devel-0.31.1-38.el7.i686.rpm
CentOS7x86_64autotrace-devel< 0.31.1-38.el7autotrace-devel-0.31.1-38.el7.x86_64.rpm
CentOS7x86_64emacs< 24.3-23.el7emacs-24.3-23.el7.x86_64.rpm
CentOS7x86_64emacs-common< 24.3-23.el7emacs-common-24.3-23.el7.x86_64.rpm
CentOS7noarchemacs-el< 24.3-23.el7emacs-el-24.3-23.el7.noarch.rpm
CentOS7noarchemacs-filesystem< 24.3-23.el7emacs-filesystem-24.3-23.el7.noarch.rpm
CentOS7x86_64emacs-nox< 24.3-23.el7emacs-nox-24.3-23.el7.x86_64.rpm
CentOS7noarchemacs-terminal< 24.3-23.el7emacs-terminal-24.3-23.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	7	i686	autotrace	< 0.31.1-38.el7	autotrace-0.31.1-38.el7.i686.rpm
CentOS	7	x86_64	autotrace	< 0.31.1-38.el7	autotrace-0.31.1-38.el7.x86_64.rpm
CentOS	7	i686	autotrace-devel	< 0.31.1-38.el7	autotrace-devel-0.31.1-38.el7.i686.rpm
CentOS	7	x86_64	autotrace-devel	< 0.31.1-38.el7	autotrace-devel-0.31.1-38.el7.x86_64.rpm
CentOS	7	x86_64	emacs	< 24.3-23.el7	emacs-24.3-23.el7.x86_64.rpm
CentOS	7	x86_64	emacs-common	< 24.3-23.el7	emacs-common-24.3-23.el7.x86_64.rpm
CentOS	7	noarch	emacs-el	< 24.3-23.el7	emacs-el-24.3-23.el7.noarch.rpm
CentOS	7	noarch	emacs-filesystem	< 24.3-23.el7	emacs-filesystem-24.3-23.el7.noarch.rpm
CentOS	7	x86_64	emacs-nox	< 24.3-23.el7	emacs-nox-24.3-23.el7.x86_64.rpm
CentOS	7	noarch	emacs-terminal	< 24.3-23.el7	emacs-terminal-24.3-23.el7.noarch.rpm