SUSE-SU-2023:4634-1: ImageMagick&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2023:4634-1 is a vulnerability in ImageMagick&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 01-12-2023
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for ImageMagick This update for ImageMagick fixes the following issues: Security issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939) - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578) - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624). - CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791). - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141) - CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983). - CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982). - CVE-2022-32547: Fixed a load of misaligned address at MagickCore/property.c. (bsc#1200387) - CVE-2022-32546: Fixed an outside the range of representable values of type. (bsc#1200389) - CVE-2022-32545: Fixed an outside the range of representable values of type. (bsc#1200388) - CVE-2022-28463: Fixed buffer overflow in coders/cin.c (bsc#1199350). - CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file (bsc#1202250). - CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563). - CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212). - CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628) - CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627) - CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626) - CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624) - CVE-2021-20246: Division by zero in ScaleResampleFilter in MagickCore/resample.c (bsc#1182337). - CVE-2021-20244: Division by zero in ImplodeImage in MagickCore/visual-effects.c (bsc#1182325). - CVE-2021-20243: Division by zero in GetResizeFilterWeight in MagickCore/resize.c (bsc#1182336). - CVE-2021-20241: Division by zero in WriteJP2Image() in coders/jp2.c (bsc#1182335). - CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file (bsc#1202800). - CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero (bsc#1181836). - CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/ps.c. (bsc#1153866) Bugfixes: - Use png_get_eXIf_1 when available (bsc#1197147).

No weakness data has been published for this record.