Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following issues: - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image bsc1107609 - CVE-2018-16645: Prevent excessive memory...

graphicsmagick/coder_MNG_fuzzer: Use-of-uninitialized-value in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5659249254858752 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1020)

This update for GraphicsMagick fixes the following issues : - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image bsc1107609 - CVE-2018-16645: Prevent excessive memory...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:2742-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following issues: - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image bsc1107609 - CVE-2018-16645: Prevent excessive memory...

graphicsmagick/coder_MNG_fuzzer: Heap-buffer-overflow in mng_get_long

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5170869563817984 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in TracePoint

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699661139017728 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-993)

This update for GraphicsMagick fixes the following security issue : - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that...

graphicsmagick/coder_SFW_fuzzer: Use-of-uninitialized-value in funcDCM_PhotometricInterpretation

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5718655917096960 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderSFWfuzzer Fuzz target binary: coderSFWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:2672-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (low)

This update for GraphicsMagick fixes the following security issue: - CVE-2018-16323: ReadXBMImage left data uninitialized when processing an XBM file that has a negative pixel value. If the affected code was used as a library loaded into a process that includes sensitive information, that...

FreeBSD : Ghostscript -- arbitrary code execution (30c0f878-b03e-11e8-be8a-0011d823eebd)

CERT reports : Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript operations. Multiple PostScript operations bypass the protections provided by -dSAFER, which can allow an attacker to execute arbitrary commands with arbitrary arguments. This...

graphicsmagick/coder_JNX_fuzzer: Use-of-uninitialized-value in funcDCM_PhotometricInterpretation

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5642969676251136 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderJNXfuzzer Fuzz target binary: coderJNXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

SUSE-SU-2018:2560-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - Disable PS and PDF coders by default, remove gs calls from delegates.mgk bsc1105592...

PT-2018-19223

Name of the Vulnerable Software and Affected Versions GraphicsMagick affected versions not specified Description The issue concerns the GraphicsMagick software, where the PS and PDF coders are disabled by default, and gs calls are removed from delegates.mgk. Recommendations At the moment, there i...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in ConvertPrimitiveToPath

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5093626565099520 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in BlendCompositePixel

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5736103441596416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2018:2516-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-937)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592...