Security update for ImageMagick

This update for ImageMagick fixes the following issues:

These security issues were fixed:

- CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint()
function (bsc#1056277).
- CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken
function that allowed remote attackers to obtain sensitive information from
process memory or possibly have unspecified other impact via a crafted SVG
document (bsc#1047356).
- CVE-2018-9133: Long compute times in the tiff decoder have been fixed (bsc#1087820).
- CVE-2018-11251: Heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause denial of service (bsc#1094237).
- CVE-2017-18271: Infinite loop in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (bsc#1094204).
- CVE-2018-11655: Memory leak in the GetImagePixelCache in MagickCore/cache.c was fixed (bsc#1095730)
- CVE-2018-10804: Memory leak in WriteTIFFImage in coders/tiff.c was fixed (bsc#1095813)
- CVE-2018-10805: Fixed memory leaks in bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c (bsc#1095812)

This update was imported from the SUSE:SLE-12:Update update project.

Fixed bugs
bnc#1087820
VUL-1: CVE-2018-9133: ImageMagick: ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage andEncodeLabImage functions (coders/tiff.c), which results in a hang (tens ofminutes) with a tiny PoC file. Remote at
bnc#1094237
VUL-0: CVE-2018-11251: GraphicsMagick,ImageMagick: Heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause denial of service
bnc#1094204
VUL-1: CVE-2017-18271: GraphicsMagick, ImageMagick: Infinite loop in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service
bnc#1047356
VUL-1: CVE-2017-10928: ImageMagick: heap-based buffer over-read in the GetNextTokenfunction in token.c
bnc#1056277
VUL-0: CVE-2017-13758: GraphicsMagick: In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in theTracePoint() function in MagickCore/draw.c.
bnc#1095730
VUL-1: CVE-2018-11655: GraphicsMagick,ImageMagick: In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in thefunction GetImagePixelCache in MagickCore/cache.c, which allows attackers tocause a denial of service via a
bnc#1095813
VUL-1: CVE-2018-10804: ImageMagick: Memory leak in WriteTIFFImage
bnc#1095812
VUL-1: CVE-2018-10805: ImageMagick: Memory leak in ReadYCBCRImage
Selected Binaries
openSUSE Build Service is sponsored by