Ubuntu: Security Advisory (USN-4206-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4206-1: GraphicsMagick vulnerabilities

It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service. CVE-2017-10794, CVE-2017-10799, CVE-2017-11102, CVE-2017-11140, CVE-2017-11403, CVE-2017-11636, CVE-2017-11637, CVE-2017-13147, CVE-2017-14042,...

USN-4206-1 graphicsmagick vulnerabilities

It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service. CVE-2017-10794, CVE-2017-10799, CVE-2017-11102, CVE-2017-11140, CVE-2017-11403, CVE-2017-11636, CVE-2017-11637, CVE-2017-13147, CVE-2017-14042,...

CVE-2016-10794

cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error SEC-154...

CVE-2016-10794

The vulnerability CVE-2016-10794 affects cPanel prior to 59.9999.145. A multipart form processing error (SEC-154) allows arbitrary file-read operations. This is evidenced across multiple connected sources (e.g., Red Hat and CNVD entries) confirming the same issue. Affected product: cPanel web-bas...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1291)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2017-10794: When GraphicsMagick processed an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occured, related to QuantumTransferMode. boo1112392 -...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:3479-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated graphicsmagick packages fix security vulnerabilities

New stable upstream release including security fixes for CVE-2016-7800, CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684, CVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799, CVE-2017-10800, CVE-2017-11403 and possibly several other security issues...

Fedora 24 : GraphicsMagick (2017-fba331bb86)

New stable upstream release, primarily includes security fixes for CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also http://www.graphicsmagick.org/NEWS.htmljuly-4-2017 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora Update for GraphicsMagick FEDORA-2017-fba331bb86

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for GraphicsMagick FEDORA-2017-3ac2e9b354

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : GraphicsMagick (2017-3ac2e9b354)

New stable upstream release, primarily includes security fixes for CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also http://www.graphicsmagick.org/NEWS.htmljuly-4-2017 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2017-10794

GraphicsMagick vulnerability CVE-2017-10794: when processing an RGB TIFF with single-sample-per-pixel metadata, a buffer overflow occurs in coders/tiff.c related to QuantumTransferMode. Public advisories indicate this was addressed in upstream releases (e.g., 1.3.26 and later); advisories from op...