OPENSUSE-SU-2019:1603-1: ImageMagick&distro=openSUSE Leap 15.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2019:1603-1 is a vulnerability in ImageMagick&distro=openSUSE Leap 15.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 24-06-2019PublishedVulnerability first disclosed.
- 07-05-2025Last modifiedVulnerability information updated.
Description
Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage() (bsc#1133204). - CVE-2019-11470: Fixed a denial-of-service in ReadCINImage() (bsc#1133205). - CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501). - CVE-2019-11598: Fixed a heap-based buffer overread in WritePNMImage() (bsc#1136732) We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183) This update was imported from the SUSE:SLE-15:Update update project.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse2 products
- ImageMagick&distro=openSUSE Leap 15.0< 7.0.7.34-lp151.7.3.1
- ImageMagick&distro=openSUSE Leap 15.1< 7.0.7.34-lp151.7.3.1
1 vendor · 2 products
References
12 links- lists.opensuse.org/archives/…Advisory