openSUSE-SU-2019:1437-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:1437-1

openSUSE-SU-2019:1437-1

Summary: Security update for GraphicsMagick

Details: This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage (boo#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage (boo#1133501). The following fixes where modified and refreshed: - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage (boo#1132054). - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage (boo#1132053). - CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial of service in coders/xwd.c (boo#1133203). - CVE-2019-11474: Fixed a floating-point exception leading to a possible denial of service in coders/xwd.c (boo#1133202). This update was imported from the openSUSE:Leap:15.0:Update update project.

References: https://lists.opensuse.org/archives/list/[email protected]/thread/DC46DQV6UAOG5GMXE3FDKFOKAJJ2ADMU/#DC46DQV6UAOG5GMXE3FDKFOKAJJ2ADMU, https://bugzilla.suse.com/1132053, https://bugzilla.suse.com/1132054, https://bugzilla.suse.com/1133202, https://bugzilla.suse.com/1133203, https://bugzilla.suse.com/1133498, https://bugzilla.suse.com/1133501, https://www.suse.com/security/cve/CVE-2019-11008, https://www.suse.com/security/cve/CVE-2019-11009, https://www.suse.com/security/cve/CVE-2019-11473, https://www.suse.com/security/cve/CVE-2019-11474, https://www.suse.com/security/cve/CVE-2019-11505, https://www.suse.com/security/cve/CVE-2019-11506