Recommended update for GraphicsMagick (moderate)

openSUSE Security Update: Recommended update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1491-1 Rating: moderate References: 1136183 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This...

graphicsmagick/coder_JPEG_fuzzer: Heap-buffer-overflow in Read32s

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5758005565456384 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderJPEGfuzzer Fuzz target binary: coderJPEGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MVG_fuzzer: Use-of-uninitialized-value in DrawImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5657696658784256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

OPENSUSE-SU-2019:1437-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage boo1133498. - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage boo1133501. The following fixes...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1427-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1437-1 Rating: moderate References: 1132053 1132054 1133202 1133203 1133498 1133501 Cross-References: CVE-2019-11008 CVE-2019-11009 CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Affected...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-1427)

This update for GraphicsMagick fixes the following issues : - CVE-2019-10131: Fixed a denial of service vulnerability caused by an off-by-one read in formatIPTCfromBuffer boo1134075 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1427-1 Rating: moderate References: 1134075 Cross-References: CVE-2019-10131 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

Debian DLA-1795-1 : graphicsmagick security update

Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit : CVE-2019-11473 The WriteMATLABImage function coders/mat.c is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause denial of service or any other...

Debian: Security Advisory (DLA-1795-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1795-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u7 CVE ID : CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473 The WriteMATLABImage function coders/mat.c is affected by a...

DLA-1795-1 graphicsmagick - security update

Bulletin has no description...

CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2018-9018

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file...

CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

GraphicsMagick CVE-2019-19951 Heap Buffer Overflow Vulnerability

Description GraphicsMagick is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successful exploits may allow the attacker to crash the affected application. Due to the nature o...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1354-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...