Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:3479-1

Опубликовано: 26 окт. 2018
Источник: suse-cvrf

Описание

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues:

Security issues fixed:

  • CVE-2017-10794: When GraphicsMagick processed an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occured, related to QuantumTransferMode. (boo#1112392)
  • CVE-2017-14997: GraphicsMagick allowed remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c. (boo#1112399)

Список пакетов

openSUSE Leap 42.3
GraphicsMagick-1.3.25-114.1
GraphicsMagick-devel-1.3.25-114.1
libGraphicsMagick++-Q16-12-1.3.25-114.1
libGraphicsMagick++-devel-1.3.25-114.1
libGraphicsMagick-Q16-3-1.3.25-114.1
libGraphicsMagick3-config-1.3.25-114.1
libGraphicsMagickWand-Q16-2-1.3.25-114.1
perl-GraphicsMagick-1.3.25-114.1

Ссылки

Описание

When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-114.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-114.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-114.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-114.1
Ссылки

Описание

GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c.

Затронутые продукты
openSUSE Leap 42.3:GraphicsMagick-1.3.25-114.1
openSUSE Leap 42.3:GraphicsMagick-devel-1.3.25-114.1
openSUSE Leap 42.3:libGraphicsMagick++-Q16-12-1.3.25-114.1
openSUSE Leap 42.3:libGraphicsMagick++-devel-1.3.25-114.1
Ссылки