SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:3327-1)

This update for tiff fixes the following issues : Security issue fixed : CVE-2018-10779: TIFFWriteScanline in tifwrite.c had a heap-based buffer over-read, as demonstrated by bmp2tiff.bsc1092480 CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial ...

SUSE SLED15 / SLES15 Security Update : audiofile (SUSE-SU-2018:3506-1)

This update for audiofile fixes the following issues : CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2018:1882-1)

This update for exiv2 to 0.26 fixes the following security issues : - CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong that could have caused a segmentation fault and application crash, which leads to denial of service bsc1060995. - CVE-2017-14862: Prevent invalid...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:4008-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. CVE-2016-10094: Fixed heap-bas...

OPENSUSE-SU-2019:0003-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security vulnerabilities fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc11197...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:0003-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1-1 Rating: moderate References: 1119790 1119822 Cross-References: CVE-2018-20184 CVE-2018-20189 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the okmodecode2 function in okmo.c...

CVE-2018-20618

CVE-2018-20618 affects ok-file-formats up to 2018-10-16, with a heap-based buffer over-read in the ok_mo_decode2 function (ok_mo.c). Multiple connected sources confirm the vulnerability and scope, noting versions prior to 2018-10-16 are affected. Public documentation provided does not specify a f...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okcsvdecode2 function in okcsv.c...

CVE-2018-20617

CVE-2018-20617 affects the ok-file-formats project, where a heap-based buffer overflow is caused by the ok_csv_decode2 function in ok_csv.c. The vulnerability is associated with versions through 2018-10-16. Connected sources (Red Hat, CNVD, CNVD, NVD/NVD variant) corroborate the same root cause a...

CVE-2018-20616

ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the okwavdecodemsadpcmdata function in okwav.c...

CVE-2018-20616

CVE-2018-20616 affects ok-file-formats (library that decodes audio formats) and stems from a heap-based buffer overflow in the function ok_wav_decode_ms_adpcm_data inside ok_wav.c. The vulnerability is documented as affecting versions up to 2018-10-16. Public CNVD entry further notes that the fla...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1632)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...

CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

CVE-2018-25011

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...

CVE-2018-20591

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...