This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501).

The following fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054).

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053).

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203).

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4207-1 advisory.

    It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ImageMagick fixes the following issues :

Security issues fixed :

CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage() (bsc#1138464).

Fixed a file content disclosure via SVG and WMF decoding (bsc#1138425).- CVE-2019-11472: Fixed a denial of service in ReadXWDImage() (bsc#1133204).

CVE-2019-11470: Fixed a denial of service in ReadCINImage() (bsc#1133205).

CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498).

CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501).

CVE-2019-10131: Fixed a off-by-one read in formatIPTCfromBuffer function in coders/meta.c (bsc#1134075).

CVE-2017-12806: Fixed a denial of service through memory exhaustion in format8BIM() (bsc#1135232).

CVE-2017-12805: Fixed a denial of service through memory exhaustion in ReadTIFFImage() (bsc#1135236).

CVE-2019-11598: Fixed a heap-based buffer over-read in WritePNMImage() (bsc#1136732)

We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11472: Fixed a denial-of-service in     ReadXWDImage() (bsc#1133204).

  - CVE-2019-11470: Fixed a denial-of-service in     ReadCINImage() (bsc#1133205).

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the WriteMATLABImage() (bsc#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the WritePDBImage() (bsc#1133501).

  - CVE-2019-11598: Fixed a heap-based buffer overread in     WritePNMImage() (bsc#1136732)

We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)

This update was imported from the SUSE:SLE-15:Update update project.

Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit :

CVE-2019-11473

The WriteMATLABImage function (coders/mat.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via crafted Matlab matrices.

CVE-2019-11474

The WritePDBImage function (coders/pdb.c) is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other unspecified impact via a crafted Palm Database file.

CVE-2019-11505 CVE-2019-11506

The XWD module (coders/xwd.c) is affected by multiple heap-based buffer overflows and arithmetic exceptions. Remote attackers might leverage these various flaws to cause denial of service or any other unspecified impact via crafted XWD files.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u7.

We recommend that you upgrade your graphicsmagick packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ImageMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11597: Fixed a heap-based buffer over-read in     the WriteTIFFImage() (bsc#1138464).

  - Fixed a file content disclosure via SVG and WMF decoding     (bsc#1138425).- CVE-2019-11472: Fixed a denial of     service in ReadXWDImage() (bsc#1133204).

  - CVE-2019-11470: Fixed a denial of service in     ReadCINImage() (bsc#1133205).

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the WriteMATLABImage() (bsc#1133498).

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the WritePDBImage() (bsc#1133501).

  - CVE-2019-10131: Fixed a off-by-one read in     formatIPTCfromBuffer function in coders/meta.c     (bsc#1134075).

  - CVE-2017-12806: Fixed a denial of service through memory     exhaustion in format8BIM() (bsc#1135232).

  - CVE-2017-12805: Fixed a denial of service through memory     exhaustion in ReadTIFFImage() (bsc#1135236).

  - CVE-2019-11598: Fixed a heap-based buffer over-read in     WritePNMImage() (bsc#1136732) We also now disable PCL in     the -SUSE configuration, as it also uses ghostscript for     decoding (bsc#1136183)

This update was imported from the SUSE:SLE-12:Update update project.

This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed media files are processed.

This update for GraphicsMagick fixes the following issues :

Security issues fixed :

  - CVE-2019-11506: Fixed a heap-based buffer overflow in     the function WriteMATLABImage (boo#1133498). 

  - CVE-2019-11505: Fixed a heap-based buffer overflow in     the function WritePDBImage (boo#1133501). The following     fixes where modified and refreshed :

  - CVE-2019-11008: Fixed a heap-based buffer overflow in     the function WriteXWDImage (boo#1132054). 

  - CVE-2019-11009: Fixed a heap-based buffer over-read in     the function ReadXWDImage (boo#1132053). 

  - CVE-2019-11473: Fixed an out-of-bounds read leading to a     possible denial of service in coders/xwd.c     (boo#1133203). 

  - CVE-2019-11474: Fixed a floating-point exception leading     to a possible denial of service in coders/xwd.c     (boo#1133202).

This update for ImageMagick fixes the following issues :

Security issues fixed :

CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage() (bsc#1133204).

CVE-2019-11470: Fixed a denial-of-service in ReadCINImage() (bsc#1133205).

CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498).

CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501).

CVE-2019-11598: Fixed a heap-based buffer overread in WritePNMImage() (bsc#1136732)

We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
124754	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1354)	Nessus	SuSE Local Security Checks	5/10/2019	5/24/2024	high
131696	Ubuntu 18.04 LTS : GraphicsMagick vulnerabilities (USN-4207-1)	Nessus	Ubuntu Local Security Checks	12/4/2019	8/27/2024	critical
126253	SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1712-1)	Nessus	SuSE Local Security Checks	6/26/2019	5/14/2024	high
126228	openSUSE Security Update : ImageMagick (openSUSE-2019-1603)	Nessus	SuSE Local Security Checks	6/25/2019	5/14/2024	high
125296	Debian DLA-1795-1 : graphicsmagick security update	Nessus	Debian Local Security Checks	5/21/2019	5/21/2024	high
126438	openSUSE Security Update : ImageMagick (openSUSE-2019-1683)	Nessus	SuSE Local Security Checks	7/2/2019	5/13/2024	high
134577	Debian DSA-4640-1 : graphicsmagick - security update	Nessus	Debian Local Security Checks	3/16/2020	3/22/2024	critical
124755	openSUSE Security Update : GraphicsMagick (openSUSE-2019-1355)	Nessus	SuSE Local Security Checks	5/10/2019	5/24/2024	high
125987	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1523-1)	Nessus	SuSE Local Security Checks	6/18/2019	5/15/2024	high

Detections

Analytics

Plugins Search

high

critical

high

high

high

high

critical

high

high