SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

CVE-2017-14138

CVE-2017-14138 affects ImageMagick 7.0.6-5, where a memory leak in ReadWEBPImage (coders/webp.c) fails to free memory in certain error paths, potentially enabling denial of service. Public sources (CNVD-2017-25388, SUSE openSUSE/SLE advisories, and OpenVAS/NASL plug-ins) confirm this vulnerabilit...