Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage (boo#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage (boo#1133501). The following fixes where modified and refreshed: - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage (boo#1132054). - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage (boo#1132053). - CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial of service in coders/xwd.c (boo#1133203). - CVE-2019-11474: Fixed a floating-point exception leading to a possible denial of service in coders/xwd.c (boo#1133202). This update was imported from the openSUSE:Leap:15.0:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage (boo#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage (boo#1133501). The following fixes where modified and refreshed: - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage (boo#1132054). - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage (boo#1132053). - CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial of service in coders/xwd.c (boo#1133203). - CVE-2019-11474: Fixed a floating-point exception leading to a possible denial of service in coders/xwd.c (boo#1133202). This update was imported from the openSUSE:Leap:15.0:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1132053
- https://bugzilla.suse.com/1132054
- https://bugzilla.suse.com/1133202
- https://bugzilla.suse.com/1133203
- https://bugzilla.suse.com/1133498
- https://bugzilla.suse.com/1133501
- https://lists.opensuse.org/archives/list/[email protected]/thread/DC46DQV6UAOG5GMXE3FDKFOKAJJ2ADMU/#DC46DQV6UAOG5GMXE3FDKFOKAJJ2ADMU
- https://www.suse.com/security/cve/CVE-2019-11008
- https://www.suse.com/security/cve/CVE-2019-11009
- https://www.suse.com/security/cve/CVE-2019-11473
- https://www.suse.com/security/cve/CVE-2019-11474
- https://www.suse.com/security/cve/CVE-2019-11505
- https://www.suse.com/security/cve/CVE-2019-11506