-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2023.7225
                      Security update for ImageMagick
                              4 December 2023

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           ImageMagick
Publisher:         SUSE
Operating System:  SUSE
Resolution:        Patch/Upgrade
CVE Names:         CVE-2023-34151 CVE-2023-5341 CVE-2023-3745
                   CVE-2023-1289 CVE-2022-44268 CVE-2022-44267
                   CVE-2022-32547 CVE-2022-32546 CVE-2022-32545
                   CVE-2022-28463 CVE-2022-2719 CVE-2022-0284
                   CVE-2021-20313 CVE-2021-20312 CVE-2021-20311
                   CVE-2021-20309 CVE-2021-20246 CVE-2021-20244
                   CVE-2021-20243 CVE-2021-20241 CVE-2021-20224
                   CVE-2021-20176 CVE-2021-3574 CVE-2020-21679
                   CVE-2019-17540  

Original Bulletin: 
   https://www.suse.com/support/update/announcement/2023/suse-su-20234634-1

Comment: CVSS (Max):  7.5 CVE-2022-44268 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
         CVSS Source: NIST, [SUSE]
         Calculator:  https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

- --------------------------BEGIN INCLUDED TEXT--------------------

Security update for ImageMagick

Announcement ID:  SUSE-SU-2023:4634-1
     Rating:      important
                    o bsc#1153866
                    o bsc#1181836
                    o bsc#1182325
                    o bsc#1182335
                    o bsc#1182336
                    o bsc#1182337
                    o bsc#1184624
                    o bsc#1184626
                    o bsc#1184627
                    o bsc#1184628
                    o bsc#1195563
                    o bsc#1197147
   References:      o bsc#1199350
                    o bsc#1200387
                    o bsc#1200388
                    o bsc#1200389
                    o bsc#1202250
                    o bsc#1202800
                    o bsc#1207982
                    o bsc#1207983
                    o bsc#1209141
                    o bsc#1211791
                    o bsc#1213624
                    o bsc#1214578
                    o bsc#1215939

                    o CVE-2019-17540
                    o CVE-2020-21679
                    o CVE-2021-20176
                    o CVE-2021-20224
                    o CVE-2021-20241
                    o CVE-2021-20243
                    o CVE-2021-20244
                    o CVE-2021-20246
                    o CVE-2021-20309
                    o CVE-2021-20311
                    o CVE-2021-20312
                    o CVE-2021-20313
Cross-References:   o CVE-2022-0284
                    o CVE-2022-2719
                    o CVE-2022-28463
                    o CVE-2022-32545
                    o CVE-2022-32546
                    o CVE-2022-32547
                    o CVE-2022-44267
                    o CVE-2022-44268
                    o CVE-2023-1289
                    o CVE-2023-34151
                    o CVE-2023-3745
                    o CVE-2023-5341

                    o CVE-2019-17540 ( SUSE ): 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N
                      /S:U/C:N/I:L/A:L
                    o CVE-2020-21679 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20176 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20176 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20224 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:H
                    o CVE-2021-20224 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20241 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20241 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20243 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20243 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20244 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20244 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20246 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20246 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20309 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20309 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20311 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20311 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20312 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:L
                    o CVE-2021-20312 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/
                      S:U/C:N/I:N/A:H
                    o CVE-2021-20313 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R
                      /S:U/C:H/I:N/A:N
                    o CVE-2021-20313 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/
                      S:U/C:H/I:N/A:N
                    o CVE-2022-0284 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:L/I:N/A:H
  CVSS scores:      o CVE-2022-0284 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:H/I:N/A:H
                    o CVE-2022-2719 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2022-2719 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2022-28463 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R
                      /S:U/C:H/I:N/A:N
                    o CVE-2022-28463 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:H/I:H/A:H
                    o CVE-2022-32545 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R
                      /S:U/C:N/I:N/A:L
                    o CVE-2022-32545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:H/I:H/A:H
                    o CVE-2022-32546 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R
                      /S:U/C:N/I:N/A:L
                    o CVE-2022-32546 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:H/I:H/A:H
                    o CVE-2022-32547 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R
                      /S:U/C:N/I:N/A:H
                    o CVE-2022-32547 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:H/I:H/A:H
                    o CVE-2022-44267 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:N/I:N/A:H
                    o CVE-2022-44267 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2022-44268 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N
                      /S:U/C:H/I:N/A:N
                    o CVE-2022-44268 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/
                      S:U/C:H/I:N/A:N
                    o CVE-2023-1289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2023-1289 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2023-34151 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R
                      /S:U/C:N/I:N/A:L
                    o CVE-2023-34151 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2023-3745 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:L
                    o CVE-2023-3745 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/
                      S:U/C:N/I:N/A:H
                    o CVE-2023-5341 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/
                      S:U/C:N/I:N/A:H
                    o CVE-2023-5341 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/
                      S:U/C:N/I:N/A:H

                    o SUSE CaaS Platform 4.0
                    o SUSE Linux Enterprise High Performance Computing 15 SP1
    Affected        o SUSE Linux Enterprise High Performance Computing 15 SP1
    Products:         LTSS 15-SP1
                    o SUSE Linux Enterprise Server 15 SP1
                    o SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1
                    o SUSE Linux Enterprise Server for SAP Applications 15 SP1

An update that solves 24 vulnerabilities and has one security fix can now be
installed.

Description:

This update for ImageMagick fixes the following issues:

Security issues:

  o CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)
  o CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c
    which may allow a remote attackers to cause a denial of service. (bsc#
    1214578)
  o CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in
    quantum-private.h (bsc#1213624).
  o CVE-2023-34151: Fixed an undefined behavior issue due to floating point
    truncation (bsc#1211791).
  o CVE-2023-1289: Fixed segmentation fault and possible DoS via specially
    crafted SVG. (bsc#1209141)
  o CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image
    (bsc#1207983).
  o CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#
    1207982).
  o CVE-2022-32547: Fixed a load of misaligned address at MagickCore/
    property.c. (bsc#1200387)
  o CVE-2022-32546: Fixed an outside the range of representable values of type.
    (bsc#1200389)
  o CVE-2022-32545: Fixed an outside the range of representable values of type.
    (bsc#1200388)
  o CVE-2022-28463: Fixed buffer overflow in coders/cin.c (bsc#1199350).
  o CVE-2022-2719: Fixed a reachable assertion that could lead to denial of
    service via a crafted file (bsc#1202250).
  o CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/
    pixel-accessor.h (bsc#1195563).
  o CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212).
  o CVE-2021-20313: Cipher leak when the calculating signatures in
    TransformSignatureof MagickCore/signature.c (bsc#1184628)
  o CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/
    thumbnail.c (bsc#1184627)
  o CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/
    colorspace.c (bsc#1184626)
  o CVE-2021-20309: Division by zero in WaveImage() of MagickCore/
    visual-effects. (bsc#1184624)
  o CVE-2021-20246: Division by zero in ScaleResampleFilter in MagickCore/
    resample.c (bsc#1182337).
  o CVE-2021-20244: Division by zero in ImplodeImage in MagickCore/
    visual-effects.c (bsc#1182325).
  o CVE-2021-20243: Division by zero in GetResizeFilterWeight in MagickCore/
    resize.c (bsc#1182336).
  o CVE-2021-20241: Division by zero in WriteJP2Image() in coders/jp2.c (bsc#
    1182335).
  o CVE-2021-20224: Fixed an integer overflow that could be triggered via a
    crafted file (bsc#1202800).
  o CVE-2021-20176: Fixed an issue where processing a crafted file could lead
    to division by zero (bsc#1181836).
  o CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/
    ps.c. (bsc#1153866)

Bugfixes:

  o Use png_get_eXIf_1 when available (bsc#1197147).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  o SUSE CaaS Platform 4.0
    To install this update, use the SUSE CaaS Platform 'skuba' tool. It will
    inform you if it detects new updates and let you then trigger updating of
    the complete cluster in a controlled way.
  o SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4634=1
  o SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4634=1
  o SUSE Linux Enterprise Server for SAP Applications 15 SP1
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4634=1

Package List:

  o SUSE CaaS Platform 4.0 (x86_64)
      ? libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-SUSE-7.0.7.34-150000.3.123.1
      ? libMagick++-devel-7.0.7.34-150000.3.123.1
      ? libMagickWand-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-upstream-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-debugsource-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? ImageMagick-devel-7.0.7.34-150000.3.123.1
      ? ImageMagick-debuginfo-7.0.7.34-150000.3.123.1
  o SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1
    (aarch64 x86_64)
      ? libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-SUSE-7.0.7.34-150000.3.123.1
      ? libMagick++-devel-7.0.7.34-150000.3.123.1
      ? libMagickWand-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-upstream-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-debugsource-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? ImageMagick-devel-7.0.7.34-150000.3.123.1
      ? ImageMagick-debuginfo-7.0.7.34-150000.3.123.1
  o SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x
    x86_64)
      ? libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-SUSE-7.0.7.34-150000.3.123.1
      ? libMagick++-devel-7.0.7.34-150000.3.123.1
      ? libMagickWand-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-upstream-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-debugsource-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? ImageMagick-devel-7.0.7.34-150000.3.123.1
      ? ImageMagick-debuginfo-7.0.7.34-150000.3.123.1
  o SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64)
      ? libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-SUSE-7.0.7.34-150000.3.123.1
      ? libMagick++-devel-7.0.7.34-150000.3.123.1
      ? libMagickWand-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-debuginfo-7.0.7.34-150000.3.123.1
      ? perl-PerlMagick-7.0.7.34-150000.3.123.1
      ? ImageMagick-config-7-upstream-7.0.7.34-150000.3.123.1
      ? libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-150000.3.123.1
      ? ImageMagick-debugsource-7.0.7.34-150000.3.123.1
      ? libMagickCore-7_Q16HDRI6-7.0.7.34-150000.3.123.1
      ? ImageMagick-devel-7.0.7.34-150000.3.123.1
      ? ImageMagick-debuginfo-7.0.7.34-150000.3.123.1

References:

  o https://www.suse.com/security/cve/CVE-2019-17540.html
  o https://www.suse.com/security/cve/CVE-2020-21679.html
  o https://www.suse.com/security/cve/CVE-2021-20176.html
  o https://www.suse.com/security/cve/CVE-2021-20224.html
  o https://www.suse.com/security/cve/CVE-2021-20241.html
  o https://www.suse.com/security/cve/CVE-2021-20243.html
  o https://www.suse.com/security/cve/CVE-2021-20244.html
  o https://www.suse.com/security/cve/CVE-2021-20246.html
  o https://www.suse.com/security/cve/CVE-2021-20309.html
  o https://www.suse.com/security/cve/CVE-2021-20311.html
  o https://www.suse.com/security/cve/CVE-2021-20312.html
  o https://www.suse.com/security/cve/CVE-2021-20313.html
  o https://www.suse.com/security/cve/CVE-2022-0284.html
  o https://www.suse.com/security/cve/CVE-2022-2719.html
  o https://www.suse.com/security/cve/CVE-2022-28463.html
  o https://www.suse.com/security/cve/CVE-2022-32545.html
  o https://www.suse.com/security/cve/CVE-2022-32546.html
  o https://www.suse.com/security/cve/CVE-2022-32547.html
  o https://www.suse.com/security/cve/CVE-2022-44267.html
  o https://www.suse.com/security/cve/CVE-2022-44268.html
  o https://www.suse.com/security/cve/CVE-2023-1289.html
  o https://www.suse.com/security/cve/CVE-2023-34151.html
  o https://www.suse.com/security/cve/CVE-2023-3745.html
  o https://www.suse.com/security/cve/CVE-2023-5341.html
  o https://bugzilla.suse.com/show_bug.cgi?id=1153866
  o https://bugzilla.suse.com/show_bug.cgi?id=1181836
  o https://bugzilla.suse.com/show_bug.cgi?id=1182325
  o https://bugzilla.suse.com/show_bug.cgi?id=1182335
  o https://bugzilla.suse.com/show_bug.cgi?id=1182336
  o https://bugzilla.suse.com/show_bug.cgi?id=1182337
  o https://bugzilla.suse.com/show_bug.cgi?id=1184624
  o https://bugzilla.suse.com/show_bug.cgi?id=1184626
  o https://bugzilla.suse.com/show_bug.cgi?id=1184627
  o https://bugzilla.suse.com/show_bug.cgi?id=1184628
  o https://bugzilla.suse.com/show_bug.cgi?id=1195563
  o https://bugzilla.suse.com/show_bug.cgi?id=1197147
  o https://bugzilla.suse.com/show_bug.cgi?id=1199350
  o https://bugzilla.suse.com/show_bug.cgi?id=1200387
  o https://bugzilla.suse.com/show_bug.cgi?id=1200388
  o https://bugzilla.suse.com/show_bug.cgi?id=1200389
  o https://bugzilla.suse.com/show_bug.cgi?id=1202250
  o https://bugzilla.suse.com/show_bug.cgi?id=1202800
  o https://bugzilla.suse.com/show_bug.cgi?id=1207982
  o https://bugzilla.suse.com/show_bug.cgi?id=1207983
  o https://bugzilla.suse.com/show_bug.cgi?id=1209141
  o https://bugzilla.suse.com/show_bug.cgi?id=1211791
  o https://bugzilla.suse.com/show_bug.cgi?id=1213624
  o https://bugzilla.suse.com/show_bug.cgi?id=1214578
  o https://bugzilla.suse.com/show_bug.cgi?id=1215939

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/
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=e/Ic
-----END PGP SIGNATURE-----