SUSE-SU-2019:1523-1: ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:1523-1 is a vulnerability in ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 17-06-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage() (bsc#1133204). - CVE-2019-11470: Fixed a denial-of-service in ReadCINImage() (bsc#1133205). - CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501). - CVE-2019-11598: Fixed a heap-based buffer overread in WritePNMImage() (bsc#1136732) We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15< 7.0.7.34-3.61.3
- ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1< 7.0.7.34-3.61.3
- ImageMagick&distro=SUSE Linux Enterprise Module for Development Tools 15< 7.0.7.34-3.61.3
- ImageMagick&distro=SUSE Linux Enterprise Module for Development Tools 15 SP1< 7.0.7.34-3.61.3
1 vendor · 4 products