Oval Definition:oval:org.opensuse.security:def:51397
Revision Date:2020-12-01Version:1
Title:Security update for ImageMagick (Moderate)
Description:

This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel() (bsc#1130330). - CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage() (bsc#1131317). - CVE-2019-11007: Fixed a heap-based buffer overflow in ReadMNGImage() (bsc#1132060). - CVE-2019-11008: Fixed a heap-based buffer overflow in WriteXWDImage() (bsc#1132054).

- Added extra -config- packages with Postscript/EPS/PDF readers still enabled.

Removing the PS decoders is used to harden ImageMagick against security issues within ghostscript. Enabling them might impact security. (bsc#1122033)

These are two packages that can be selected:

- ImageMagick-config-7-SUSE: This has the PS decoders disabled. - ImageMagick-config-7-upstream: This has the PS decoders enabled.

Depending on your local needs install either one of them. The default is the -SUSE configuration.

Family:unixClass:patch
Status:Reference(s):1058115
1099098
1109412
1109413
1109414
1111996
1112534
1112535
1113247
1113252
1113255
1116827
1118644
1118830
1118831
1120640
1121034
1121035
1121056
1122033
1130330
1131317
1132054
1132060
1133131
1133232
1138264
1139884
1139885
1139886
1140100
1140102
1140103
1140104
1140105
1140106
1140110
1140111
1140501
1140513
1140520
1140534
1140538
1140543
1140545
1140547
1140549
1140552
1140554
1140664
1140665
1140666
1140667
1140668
1140669
1140673
1141171
1141913
1142772
1152590
1153108
1154016
1154025
1157770
1163592
1165631
1167030
1169978
1171252
1171254
1172873
1173258
1173477
1173691
1173694
1173700
1173701
1173743
1173874
1173875
1173876
1173880
1175070
1175071
1175074
1175306
1175721
1176086
1176181
1176671
1176855
1176907
1176983
1177703
1177819
1177820
1178123
1178393
1178589
1178622
1178686
1178765
1178782
927455
CVE-2008-2109
CVE-2011-4405
CVE-2012-1174
CVE-2013-2063
CVE-2013-4288
CVE-2017-18922
CVE-2018-1000876
CVE-2018-12882
CVE-2018-17358
CVE-2018-17359
CVE-2018-17360
CVE-2018-17985
CVE-2018-18309
CVE-2018-18483
CVE-2018-18484
CVE-2018-18605
CVE-2018-18606
CVE-2018-18607
CVE-2018-19931
CVE-2018-19932
CVE-2018-20623
CVE-2018-20651
CVE-2018-20671
CVE-2018-21247
CVE-2018-6323
CVE-2018-6543
CVE-2018-6759
CVE-2018-6872
CVE-2018-7208
CVE-2018-7568
CVE-2018-7569
CVE-2018-7570
CVE-2018-7642
CVE-2018-7643
CVE-2018-8945
CVE-2019-1010180
CVE-2019-10220
CVE-2019-10650
CVE-2019-11007
CVE-2019-11008
CVE-2019-12817
CVE-2019-12974
CVE-2019-12975
CVE-2019-12976
CVE-2019-12977
CVE-2019-12978
CVE-2019-12979
CVE-2019-13133
CVE-2019-13134
CVE-2019-13135
CVE-2019-13136
CVE-2019-13137
CVE-2019-13295
CVE-2019-13296
CVE-2019-13297
CVE-2019-13298
CVE-2019-13299
CVE-2019-13300
CVE-2019-13301
CVE-2019-13302
CVE-2019-13303
CVE-2019-13304
CVE-2019-13305
CVE-2019-13306
CVE-2019-13307
CVE-2019-13308
CVE-2019-13309
CVE-2019-13310
CVE-2019-13311
CVE-2019-13391
CVE-2019-13454
CVE-2019-20839
CVE-2019-20840
CVE-2019-9956
CVE-2020-11984
CVE-2020-11993
CVE-2020-12653
CVE-2020-12654
CVE-2020-14397
CVE-2020-14398
CVE-2020-14399
CVE-2020-14400
CVE-2020-14401
CVE-2020-14402
CVE-2020-1749
CVE-2020-24659
CVE-2020-25668
CVE-2020-25704
CVE-2020-25705
CVE-2020-8903
CVE-2020-8907
CVE-2020-8933
CVE-2020-9490
SUSE-SU-2018:1936-2
SUSE-SU-2019:1019-1
SUSE-SU-2019:1769-1
SUSE-SU-2019:2106-1
SUSE-SU-2019:2779-1
SUSE-SU-2019:3216-1
SUSE-SU-2020:1452-1
SUSE-SU-2020:1922-1
SUSE-SU-2020:1934-1
SUSE-SU-2020:2344-1
SUSE-SU-2020:2988-1
SUSE-SU-2020:3507-1
Platform(s):openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15 SP2
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND libHX28-3.22-lp150.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • libxslt-1.1.24-19.23 is installed
  • OR libxslt-32bit-1.1.24-19.23 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • glibc-2.11.3-17.87 is installed
  • OR glibc-32bit-2.11.3-17.87 is installed
  • OR glibc-devel-2.11.3-17.87 is installed
  • OR glibc-devel-32bit-2.11.3-17.87 is installed
  • OR glibc-i18ndata-2.11.3-17.87 is installed
  • OR glibc-locale-2.11.3-17.87 is installed
  • OR glibc-locale-32bit-2.11.3-17.87 is installed
  • OR nscd-2.11.3-17.87 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • kernel-default-3.0.101-65 is installed
  • OR kernel-default-base-3.0.101-65 is installed
  • OR kernel-default-devel-3.0.101-65 is installed
  • OR kernel-default-extra-3.0.101-65 is installed
  • OR kernel-pae-3.0.101-65 is installed
  • OR kernel-pae-base-3.0.101-65 is installed
  • OR kernel-pae-devel-3.0.101-65 is installed
  • OR kernel-pae-extra-3.0.101-65 is installed
  • OR kernel-source-3.0.101-65 is installed
  • OR kernel-syms-3.0.101-65 is installed
  • OR kernel-trace-3.0.101-65 is installed
  • OR kernel-trace-devel-3.0.101-65 is installed
  • OR kernel-xen-3.0.101-65 is installed
  • OR kernel-xen-base-3.0.101-65 is installed
  • OR kernel-xen-devel-3.0.101-65 is installed
  • OR kernel-xen-extra-3.0.101-65 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • python-cupshelpers-1.4.5-1 is installed
  • OR system-config-printer-1.4.5-1 is installed
  • OR system-config-printer-common-1.4.5-1 is installed
  • OR system-config-printer-common-lang-1.4.5-1 is installed
  • OR system-config-printer-dbus-service-1.4.5-1 is installed
  • OR udev-configure-printer-1.4.5-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • libXtst6-1.2.2-3 is installed
  • OR libXtst6-32bit-1.2.2-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • at-3.1.14-7 is installed
  • OR libQtWebKit4-4.8.6+2.3.3-3 is installed
  • OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed
  • OR libbonobo-2.32.1-16 is installed
  • OR libbonobo-32bit-2.32.1-16 is installed
  • OR libbonobo-lang-2.32.1-16 is installed
  • OR libkde4-4.12.0-7 is installed
  • OR libkde4-32bit-4.12.0-7 is installed
  • OR libkdecore4-4.12.0-7 is installed
  • OR libkdecore4-32bit-4.12.0-7 is installed
  • OR libksuseinstall1-4.12.0-7 is installed
  • OR libksuseinstall1-32bit-4.12.0-7 is installed
  • OR libnetpbm11-10.66.3-4 is installed
  • OR libnetpbm11-32bit-10.66.3-4 is installed
  • OR netpbm-10.66.3-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • emacs-24.3-25.3 is installed
  • OR emacs-info-24.3-25.3 is installed
  • OR emacs-x11-24.3-25.3 is installed
  • OR etags-24.3-25.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
  • AND Package Information
  • binutils-2.32-7.5 is installed
  • OR binutils-gold-2.32-7.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 is installed
  • AND Package Information
  • ImageMagick-7.0.7.34-3.54 is installed
  • OR perl-PerlMagick-7.0.7.34-3.54 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
  • AND Package Information
  • ImageMagick-7.0.7.34-3.67 is installed
  • OR perl-PerlMagick-7.0.7.34-3.67 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-150_35-default-3-2 is installed
  • OR kernel-livepatch-SLE15_Update_14-3-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_4-default-2-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_1-2-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
  • AND Package Information
  • google-compute-engine-20190801-4.38 is installed
  • OR google-compute-engine-init-20190801-4.38 is installed
  • OR google-compute-engine-oslogin-20190801-4.38 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.3 is installed
  • OR php7-7.2.5-4.3 is installed
  • OR php7-bcmath-7.2.5-4.3 is installed
  • OR php7-bz2-7.2.5-4.3 is installed
  • OR php7-calendar-7.2.5-4.3 is installed
  • OR php7-ctype-7.2.5-4.3 is installed
  • OR php7-curl-7.2.5-4.3 is installed
  • OR php7-dba-7.2.5-4.3 is installed
  • OR php7-devel-7.2.5-4.3 is installed
  • OR php7-dom-7.2.5-4.3 is installed
  • OR php7-enchant-7.2.5-4.3 is installed
  • OR php7-exif-7.2.5-4.3 is installed
  • OR php7-fastcgi-7.2.5-4.3 is installed
  • OR php7-fileinfo-7.2.5-4.3 is installed
  • OR php7-fpm-7.2.5-4.3 is installed
  • OR php7-ftp-7.2.5-4.3 is installed
  • OR php7-gd-7.2.5-4.3 is installed
  • OR php7-gettext-7.2.5-4.3 is installed
  • OR php7-gmp-7.2.5-4.3 is installed
  • OR php7-iconv-7.2.5-4.3 is installed
  • OR php7-intl-7.2.5-4.3 is installed
  • OR php7-json-7.2.5-4.3 is installed
  • OR php7-ldap-7.2.5-4.3 is installed
  • OR php7-mbstring-7.2.5-4.3 is installed
  • OR php7-mysql-7.2.5-4.3 is installed
  • OR php7-odbc-7.2.5-4.3 is installed
  • OR php7-opcache-7.2.5-4.3 is installed
  • OR php7-openssl-7.2.5-4.3 is installed
  • OR php7-pcntl-7.2.5-4.3 is installed
  • OR php7-pdo-7.2.5-4.3 is installed
  • OR php7-pear-7.2.5-4.3 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.3 is installed
  • OR php7-pgsql-7.2.5-4.3 is installed
  • OR php7-phar-7.2.5-4.3 is installed
  • OR php7-posix-7.2.5-4.3 is installed
  • OR php7-shmop-7.2.5-4.3 is installed
  • OR php7-snmp-7.2.5-4.3 is installed
  • OR php7-soap-7.2.5-4.3 is installed
  • OR php7-sockets-7.2.5-4.3 is installed
  • OR php7-sqlite-7.2.5-4.3 is installed
  • OR php7-sysvmsg-7.2.5-4.3 is installed
  • OR php7-sysvsem-7.2.5-4.3 is installed
  • OR php7-sysvshm-7.2.5-4.3 is installed
  • OR php7-tokenizer-7.2.5-4.3 is installed
  • OR php7-wddx-7.2.5-4.3 is installed
  • OR php7-xmlreader-7.2.5-4.3 is installed
  • OR php7-xmlrpc-7.2.5-4.3 is installed
  • OR php7-xmlwriter-7.2.5-4.3 is installed
  • OR php7-xsl-7.2.5-4.3 is installed
  • OR php7-zip-7.2.5-4.3 is installed
  • OR php7-zlib-7.2.5-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND perl-XML-LibXML-2.0019-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • MozillaFirefox-52.3.0esr-109.3 is installed
  • OR MozillaFirefox-devel-52.3.0esr-109.3 is installed
  • OR MozillaFirefox-translations-52.3.0esr-109.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libXinerama1-1.1.3-3 is installed
  • OR libXinerama1-32bit-1.1.3-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • apache2-2.4.23-29.27 is installed
  • OR apache2-doc-2.4.23-29.27 is installed
  • OR apache2-example-pages-2.4.23-29.27 is installed
  • OR apache2-prefork-2.4.23-29.27 is installed
  • OR apache2-utils-2.4.23-29.27 is installed
  • OR apache2-worker-2.4.23-29.27 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND shadow-4.2.1-27.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_120-92_70-default-3-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_20-3-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • cpio-2.11-35 is installed
  • OR cpio-lang-2.11-35 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • kernel-default-4.4.180-94.113 is installed
  • OR kernel-default-base-4.4.180-94.113 is installed
  • OR kernel-default-devel-4.4.180-94.113 is installed
  • OR kernel-devel-4.4.180-94.113 is installed
  • OR kernel-macros-4.4.180-94.113 is installed
  • OR kernel-source-4.4.180-94.113 is installed
  • OR kernel-syms-4.4.180-94.113 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • MozillaFirefox-68.1.0-109.89 is installed
  • OR MozillaFirefox-branding-SLE-68-32.8 is installed
  • OR MozillaFirefox-translations-common-68.1.0-109.89 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • MozillaFirefox-60.8.0-109.83 is installed
  • OR MozillaFirefox-translations-common-60.8.0-109.83 is installed
  • OR libfreebl3-3.44.1-58.28 is installed
  • OR libfreebl3-32bit-3.44.1-58.28 is installed
  • OR libfreebl3-hmac-3.44.1-58.28 is installed
  • OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed
  • OR libsoftokn3-3.44.1-58.28 is installed
  • OR libsoftokn3-32bit-3.44.1-58.28 is installed
  • OR libsoftokn3-hmac-3.44.1-58.28 is installed
  • OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-3.44.1-58.28 is installed
  • OR mozilla-nss-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-certs-3.44.1-58.28 is installed
  • OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-sysinit-3.44.1-58.28 is installed
  • OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed
  • OR mozilla-nss-tools-3.44.1-58.28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND ucode-intel-20180807-13.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • libopenssl-1_0_0-devel-1.0.2p-2 is installed
  • OR libopenssl1_0_0-1.0.2p-2 is installed
  • OR libopenssl1_0_0-32bit-1.0.2p-2 is installed
  • OR libopenssl1_0_0-hmac-1.0.2p-2 is installed
  • OR libopenssl1_0_0-hmac-32bit-1.0.2p-2 is installed
  • OR openssl-1_0_0-1.0.2p-2 is installed
  • OR openssl-1_0_0-doc-1.0.2p-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • gnutls-3.6.7-6.34 is installed
  • OR libgnutls-devel-3.6.7-6.34 is installed
  • OR libgnutls30-3.6.7-6.34 is installed
  • OR libgnutls30-32bit-3.6.7-6.34 is installed
  • OR libgnutls30-hmac-3.6.7-6.34 is installed
  • OR libgnutls30-hmac-32bit-3.6.7-6.34 is installed
  • OR libgnutlsxx-devel-3.6.7-6.34 is installed
  • OR libgnutlsxx28-3.6.7-6.34 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • apache2-2.4.33-3.33 is installed
  • OR apache2-devel-2.4.33-3.33 is installed
  • OR apache2-doc-2.4.33-3.33 is installed
  • OR apache2-prefork-2.4.33-3.33 is installed
  • OR apache2-utils-2.4.33-3.33 is installed
  • OR apache2-worker-2.4.33-3.33 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • LibVNCServer-0.9.10-4.22 is installed
  • OR libvncclient0-0.9.10-4.22 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • libdcerpc-atsvc0-4.2.4-28.29 is installed
  • OR samba-4.2.4-28.29 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND python-cryptography-2.0.3-3.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND couchdb-1.7.2-3.3 is installed
    • BACK