Lucene search

K
suseSuseSUSE-SU-2016:1301-1
HistoryMay 13, 2016 - 8:08 p.m.

Security update for ImageMagick (important)

2016-05-1320:08:08
lists.opensuse.org
18

0.969 High

EPSS

Percentile

99.6%

This update for ImageMagick fixes the following issues:

  • bsc#978061: A vulnerability in ImageMagickโ€™s "https" module allowed
    users to execute arbitrary shell commands on the host performing the
    image conversion. The issue had the potential for remote command
    injection. This update mitigates the vulnerability by disabling all
    access to the "https" module in the "delegates.xml" config file.
    (CVE-2016-3714)