openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:1629-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Memory corruption

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

CVE-2018-17965

ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c...

CVE-2018-17967

ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c...

Memory corruption

ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c...

CVE-2018-17966

CVE-2018-17966 is rejected and not an active vulnerability.

CVE-2018-17965

CVE-2018-17965 affects ImageMagick 7.0.7-28, with a memory leak in WriteSGIImage (coders/sgi.c). The connected records confirm this CVE is included in multiple vendor advisories (Ubuntu USN-4034-1, SUSE/openSUSE updates) and is addressed within those ImageMagick mitigations. The exact patched ver...

CVE-2018-16750

In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found...

Kernel update: Virtuozzo ReadyKernel patch 60.0 for Virtuozzo 7.0.4 to 7.0.7

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to Virtuozzo 7.0.4 to 7.0.7. Vulnerability id: PSBM-88082 File systems: insufficient error handling in sget could lead to excessive memory consumption...

Kernel update: Virtuozzo ReadyKernel patch 60.0 for Virtuozzo 7.0.7 to 7.0.8

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.7 to 7.0.8. Vulnerability id: PSBM-87665 fusekiopcs: potential kernel crash NULL pointer dereference in pcsmapencodereq. Vulnerability id: PSBM-88082 File systems: insufficient error...

Kernel update: Virtuozzo ReadyKernel patch 59.0 for Virtuozzo 7.0.7 to 7.0.7 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.7 to 7.0.7 HF3. Vulnerability id: PSBM-73001 sunrpc: potential kernel crash use after free in svcprocesscommon. Vulnerability id: PSBM-87281 'libvirtd' service was unresponsive because...

Kernel update: Virtuozzo ReadyKernel patch 57.0 for Virtuozzo 7.0.7 to 7.0.8

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to kernels 3.10.0-693.17.1.vz7.43.10 7.0.7, 3.10.0-693.21.1.vz7.46.7 7.0.7 HF2, 3.10.0-693.21.1.vz7.48.2 7.0.7 HF3, 3.10.0-862.9.1.vz7.63.3 7.0.8. Vulnerability id: PSBM-87338 Kernel module 'ipset' trie...

Security update for ImageMagick (moderate)

This update for ImageMagick to version 7.0.7-34 fixes the following issues: The following security issue was fixed: - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts. The following non-security issues were fixed: - Added support for reading eXIf chunks ...

Kernel security update: CVE-2018-1130 and other; Virtuozzo ReadyKernel patch 52.0 for Virtuozzo 7.0.7 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the Virtuozzo 7.0 kernel 3.10.0-693.21.1.vz7.48.2 7.0.7 HF3. Vulnerability id: CVE-2018-1130 Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11624

In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...