[SECURITY] [DLA 2902-1] graphicsmagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2902-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 27, 2022 https://wiki.debian.org/LTS -...

DLA-2902-1 graphicsmagick - security update

Bulletin has no description...

graphicsmagick:coder_MSL_fuzzer: Global-buffer-overflow in xmlParsePI

Detailed Report: https://oss-fuzz.com/testcase?key=6514436804837376 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderMSLfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001a45c02 Crash State: xmlParseP...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=6147496928215040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in inflate

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6451937405435904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_P7_fuzzer: Use-of-uninitialized-value in WritePNMImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5008645446828032 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderP7fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

graphicsmagick:coder_PCT_fuzzer: Heap-buffer-overflow in ReadBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5102770225545216 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPCTfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

graphicsmagick:coder_PNM_fuzzer: Use-of-uninitialized-value in SyncImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5856373341028352 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPNMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5481768449343488 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ReadMATImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6478399959334912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in read_user_chunk_callback

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5167930105528320 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_SVG_fuzzer: Heap-use-after-free in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=4943095205068800 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderSVGfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b00003e058 Crash State:...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in inflate

Detailed Report: https://oss-fuzz.com/testcase?key=5604800448823296 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate pngreadIDATdata...

graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6230132319191040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: jpcpchglistdestroy...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Detailed Report: https://oss-fuzz.com/testcase?key=6147169237729280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportViewPixelArea...

graphicsmagick:coder_MSL_fuzzer: Heap-buffer-overflow in MSLEndElement

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4819088761815040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in read_user_chunk_callback

Detailed Report: https://oss-fuzz.com/testcase?key=5660520292679680 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: readuserchunkcallback...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Detailed Report: https://oss-fuzz.com/testcase?key=5979093489811456 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IsGrayImage WriteMATLABImag...

graphicsmagick:coder_CALS_fuzzer: Use-of-uninitialized-value in Fax4Decode

Detailed Report: https://oss-fuzz.com/testcase?key=5904451320283136 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCALSfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Fax4Decode TIFFReadScanlin...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5163498645094400 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-valu...