Описание
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues:
- CVE-2017-8350: denial of service via crafted PNG file (boo#1036985)
- CVE-2017-8351: denial of service via crafted PCD file (boo#1036986)
- CVE-2017-8353: denial of service via crafted PICT file (boo#1036988)
- CVE-2017-8355: denial of service via crafted MTV file (boo#1036990)
Список пакетов
openSUSE Leap 42.2
GraphicsMagick-1.3.25-11.6.1
GraphicsMagick-devel-1.3.25-11.6.1
libGraphicsMagick++-Q16-12-1.3.25-11.6.1
libGraphicsMagick++-devel-1.3.25-11.6.1
libGraphicsMagick-Q16-3-1.3.25-11.6.1
libGraphicsMagick3-config-1.3.25-11.6.1
libGraphicsMagickWand-Q16-2-1.3.25-11.6.1
perl-GraphicsMagick-1.3.25-11.6.1
Ссылки
- E-Mail link for openSUSE-SU-2017:1413-1
- SUSE Security Ratings
Описание
In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Затронутые продукты
openSUSE Leap 42.2:GraphicsMagick-1.3.25-11.6.1
openSUSE Leap 42.2:GraphicsMagick-devel-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-Q16-12-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-devel-1.3.25-11.6.1
Ссылки
- CVE-2017-8350
- SUSE Bug 1036985
- SUSE Bug 1053919
- SUSE Bug 1126909
Описание
In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Затронутые продукты
openSUSE Leap 42.2:GraphicsMagick-1.3.25-11.6.1
openSUSE Leap 42.2:GraphicsMagick-devel-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-Q16-12-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-devel-1.3.25-11.6.1
Ссылки
- CVE-2017-8351
- SUSE Bug 1036986
- SUSE Bug 1126909
Описание
In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Затронутые продукты
openSUSE Leap 42.2:GraphicsMagick-1.3.25-11.6.1
openSUSE Leap 42.2:GraphicsMagick-devel-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-Q16-12-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-devel-1.3.25-11.6.1
Ссылки
- CVE-2017-8353
- SUSE Bug 1036988
- SUSE Bug 1055010
- SUSE Bug 1126909
Описание
In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.
Затронутые продукты
openSUSE Leap 42.2:GraphicsMagick-1.3.25-11.6.1
openSUSE Leap 42.2:GraphicsMagick-devel-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-Q16-12-1.3.25-11.6.1
openSUSE Leap 42.2:libGraphicsMagick++-devel-1.3.25-11.6.1
Ссылки
- CVE-2017-8355
- SUSE Bug 1036990
- SUSE Bug 1126909