Debian DLA-1168-1 : graphicsmagick security update

A remote denial of service vulnerability has been discovered in graphicsmagick, a collection of image processing tools and associated libraries. A specially crafted file can be used to produce a heap-based buffer overflow and application crash by exploiting a defect in the AcquireCacheNexus...

CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

CVE-2017-14649

CVE-2017-14649 affects GraphicsMagick 1.3.26, where ReadOneJNGImage in coder/png.c does inadequate validation of JNG data, causing an assertion failure in magick/pixel_cache.c and an application crash (DoS). Connected sources do not provide an updated fix or remediation details beyond the initial...