SUSE-SU-2017:3056-1

Dashboard / Vulnerabilities / SUSE-SU-2017:3056-1

SUSE-SU-2017:3056-1

Summary: Security update for GraphicsMagick

Details: This update for GraphicsMagick fixes the following issues: - CVE-2017-15033: A denial of service attack (memory leak) in ReadYUVImage in coders/yuv.c was fixed (bsc#1061873) - CVE-2017-13063: A heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c was fixed (bsc#1055050) - CVE-2017-13064: A heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c was fixed (bsc#1055042) - CVE-2017-12936: The ReadWMFImage function in coders/wmf.c in GraphicsMagick had a use-after-free issue for data associated with exception reporting. (bsc#1054598) - CVE-2017-13139: The ReadOneMNGImage function in coders/png.c had an out-of-bounds read with the MNG CLIP chunk. (bsc#1055430) - CVE-2017-12937: The ReadSUNImage function in coders/sun.c in GraphicsMagick had a colormap heap-based buffer over-read. (bsc#1054596) - CVE-2017-11534: A Memory Leak in the lite_font_map() function in coders/wmf.c was fixed (bsc#1050135)

References: https://www.suse.com/support/update/announcement/2017/suse-su-20173056-1/, https://bugzilla.suse.com/1050135, https://bugzilla.suse.com/1054596, https://bugzilla.suse.com/1054598, https://bugzilla.suse.com/1055042, https://bugzilla.suse.com/1055050, https://bugzilla.suse.com/1055430, https://bugzilla.suse.com/1061873, https://www.suse.com/security/cve/CVE-2017-11534, https://www.suse.com/security/cve/CVE-2017-12936, https://www.suse.com/security/cve/CVE-2017-12937, https://www.suse.com/security/cve/CVE-2017-13063, https://www.suse.com/security/cve/CVE-2017-13064, https://www.suse.com/security/cve/CVE-2017-13139, https://www.suse.com/security/cve/CVE-2017-15033