openSUSE Security Update: Security update for opencv
______________________________________________________________________________

Announcement ID: openSUSE-SU-2018:1385-1
Rating: important
References: #1033152 #1052451 #1052454 #1052455 #1052456
#1052457 #1052459 #1052461 #1052462 #1052465
#1054019 #1054020 #1054021 #1054984 #1057146

Cross-References: CVE-2016-1516 CVE-2017-12597 CVE-2017-12598
CVE-2017-12599 CVE-2017-12600 CVE-2017-12601
CVE-2017-12602 CVE-2017-12603 CVE-2017-12604
CVE-2017-12605 CVE-2017-12606 CVE-2017-12862
CVE-2017-12863 CVE-2017-12864 CVE-2017-14136

Affected Products:
openSUSE Leap 42.3
______________________________________________________________________________

An update that fixes 15 vulnerabilities is now available.

Description:

This update for opencv fixes the following issues:

Security issues fixed:

– CVE-2016-1516: OpenCV had a double free issue that allowed attackers to
execute arbitrary code. (boo#1033152)
– CVE-2017-14136: OpenCV had an out-of-bounds write error in the function
FillColorRow1 in utils.cpp when reading an image file by using
cv::imread. NOTE: this vulnerability exists because of an incomplete fix
for CVE-2017-12597. (boo#1057146)
– CVE-2017-12606: OpenCV had an out-of-bounds write error in the function
FillColorRow4 in utils.cpp when reading an image file by using
cv::imread. (boo#1052451)
– CVE-2017-12604: OpenCV had an out-of-bounds write error in the
FillUniColor function in utils.cpp when reading an image file by using
cv::imread. (boo#1052454)
– CVE-2017-12603: OpenCV had an invalid write in the
cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp
when reading an image file by using cv::imread, as demonstrated by the
2-opencv-heapoverflow-fseek test case. (boo#1052455)
– CVE-2017-12602: OpenCV had a denial of service (memory consumption)
issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
(boo#1052456)
– CVE-2017-12601: OpenCV had a buffer overflow in the
cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp
when reading an image file by using cv::imread, as demonstrated by the
4-buf-overflow-readData-memcpy test case. (boo#1052457)
– CVE-2017-12600: OpenCV had a denial of service (CPU consumption) issue,
as demonstrated by the 11-opencv-dos-cpu-exhaust test case. (boo#1052459)
– CVE-2017-12599: OpenCV had an out-of-bounds read error in the function
icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
(boo#1052461)
– CVE-2017-12598: OpenCV had an out-of-bounds read error in the
cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp
when reading an image file by using cv::imread, as demonstrated by the
8-opencv-invalid-read-fread test case. (boo#1052462)
– CVE-2017-12597: OpenCV had an out-of-bounds write error in the function
FillColorRow1 in utils.cpp when reading an image file by using
cv::imread. (boo#1052465)
– CVE-2017-12864: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function
ReadNumber did not checkout the input length, which lead to integer
overflow. If the image is from remote, may lead to remote code execution
or denial of service. (boo#1054019)
– CVE-2017-12863: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function
PxMDecoder::readData has an integer overflow when calculate src_pitch.
If the image is from remote, may lead to remote code execution or denial
of service. (boo#1054020)
– CVE-2017-12862: In modules/imgcodecs/src/grfmt_pxm.cpp, the length of
buffer AutoBuffer _src is small than expected, which will cause copy
buffer overflow later. If the image is from remote, may lead to remote
code execution or denial of service. (boo#1054021)
– CVE-2017-12605: OpenCV had an out-of-bounds write error in the
FillColorRow8 function in utils.cpp when reading an image file by using
cv::imread. (boo#1054984)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-492=1

Package List:

– openSUSE Leap 42.3 (x86_64):

libopencv-qt56_3-3.1.0-4.6.1
libopencv-qt56_3-debuginfo-3.1.0-4.6.1
libopencv3_1-3.1.0-4.6.1
libopencv3_1-debuginfo-3.1.0-4.6.1
opencv-3.1.0-4.6.1
opencv-debuginfo-3.1.0-4.6.1
opencv-debugsource-3.1.0-4.6.1
opencv-devel-3.1.0-4.6.1
opencv-doc-3.1.0-4.6.1
opencv-qt5-3.1.0-4.6.1
opencv-qt5-debuginfo-3.1.0-4.6.1
opencv-qt5-debugsource-3.1.0-4.6.1
opencv-qt5-devel-3.1.0-4.6.1
opencv-qt5-doc-3.1.0-4.6.1
python-opencv-3.1.0-4.6.1
python-opencv-debuginfo-3.1.0-4.6.1
python-opencv-qt5-3.1.0-4.6.1
python-opencv-qt5-debuginfo-3.1.0-4.6.1
python3-opencv-3.1.0-4.6.1
python3-opencv-debuginfo-3.1.0-4.6.1
python3-opencv-qt5-3.1.0-4.6.1
python3-opencv-qt5-debuginfo-3.1.0-4.6.1

References:

https://www.suse.com/security/cve/CVE-2016-1516.html
https://www.suse.com/security/cve/CVE-2017-12597.html
https://www.suse.com/security/cve/CVE-2017-12598.html
https://www.suse.com/security/cve/CVE-2017-12599.html
https://www.suse.com/security/cve/CVE-2017-12600.html
https://www.suse.com/security/cve/CVE-2017-12601.html
https://www.suse.com/security/cve/CVE-2017-12602.html
https://www.suse.com/security/cve/CVE-2017-12603.html
https://www.suse.com/security/cve/CVE-2017-12604.html
https://www.suse.com/security/cve/CVE-2017-12605.html
https://www.suse.com/security/cve/CVE-2017-12606.html
https://www.suse.com/security/cve/CVE-2017-12862.html
https://www.suse.com/security/cve/CVE-2017-12863.html
https://www.suse.com/security/cve/CVE-2017-12864.html
https://www.suse.com/security/cve/CVE-2017-14136.html
https://bugzilla.suse.com/1033152
https://bugzilla.suse.com/1052451
https://bugzilla.suse.com/1052454
https://bugzilla.suse.com/1052455
https://bugzilla.suse.com/1052456
https://bugzilla.suse.com/1052457
https://bugzilla.suse.com/1052459
https://bugzilla.suse.com/1052461
https://bugzilla.suse.com/1052462
https://bugzilla.suse.com/1052465
https://bugzilla.suse.com/1054019
https://bugzilla.suse.com/1054020
https://bugzilla.suse.com/1054021
https://bugzilla.suse.com/1054984
https://bugzilla.suse.com/1057146

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org