Security update for GraphicsMagick (low)

2018-09-1715:08:02

lists.opensuse.org

0.015 Low

EPSS

Percentile

85.6%

JSON

This update for GraphicsMagick fixes the following issues:

CVE-2018-16644: Added missing check for length in the functions
ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause
a denial of service via a crafted image (bsc#1107609)
CVE-2018-16645: Prevent excessive memory allocation issue in the
functions ReadBMPImage and ReadDIBImage, which allowed remote attackers
to cause a denial
of service via a crafted image file (bsc#1107604)

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3i586graphicsmagick-debuginfo< 1.3.25-105.1GraphicsMagick-debuginfo-1.3.25-105.1.i586.rpm
openSUSE Leap42.3x86_64perl-graphicsmagick< 1.3.25-105.1perl-GraphicsMagick-1.3.25-105.1.x86_64.rpm
openSUSE Leap42.3x86_64libgraphicsmagick++-q16-12< 1.3.25-105.1libGraphicsMagick++-Q16-12-1.3.25-105.1.x86_64.rpm
openSUSE Leap15.0x86_64perl-graphicsmagick-debuginfo< 1.3.29-lp150.3.12.1perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.12.1.x86_64.rpm
openSUSE Leap42.3x86_64graphicsmagick-devel< 1.3.25-105.1GraphicsMagick-devel-1.3.25-105.1.x86_64.rpm
openSUSE Leap42.3x86_64graphicsmagick< 1.3.25-105.1GraphicsMagick-1.3.25-105.1.x86_64.rpm
openSUSE Leap42.3i586libgraphicsmagick-q16-3< 1.3.25-105.1libGraphicsMagick-Q16-3-1.3.25-105.1.i586.rpm
openSUSE Leap42.3i586libgraphicsmagickwand-q16-2< 1.3.25-105.1libGraphicsMagickWand-Q16-2-1.3.25-105.1.i586.rpm
openSUSE Leap42.3x86_64graphicsmagick-debugsource< 1.3.25-105.1GraphicsMagick-debugsource-1.3.25-105.1.x86_64.rpm
openSUSE Leap15.0x86_64graphicsmagick-debugsource< 1.3.29-lp150.3.12.1GraphicsMagick-debugsource-1.3.29-lp150.3.12.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	i586	graphicsmagick-debuginfo	< 1.3.25-105.1	GraphicsMagick-debuginfo-1.3.25-105.1.i586.rpm
openSUSE Leap	42.3	x86_64	perl-graphicsmagick	< 1.3.25-105.1	perl-GraphicsMagick-1.3.25-105.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libgraphicsmagick++-q16-12	< 1.3.25-105.1	libGraphicsMagick++-Q16-12-1.3.25-105.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	perl-graphicsmagick-debuginfo	< 1.3.29-lp150.3.12.1	perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.12.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	graphicsmagick-devel	< 1.3.25-105.1	GraphicsMagick-devel-1.3.25-105.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	graphicsmagick	< 1.3.25-105.1	GraphicsMagick-1.3.25-105.1.x86_64.rpm
openSUSE Leap	42.3	i586	libgraphicsmagick-q16-3	< 1.3.25-105.1	libGraphicsMagick-Q16-3-1.3.25-105.1.i586.rpm
openSUSE Leap	42.3	i586	libgraphicsmagickwand-q16-2	< 1.3.25-105.1	libGraphicsMagickWand-Q16-2-1.3.25-105.1.i586.rpm
openSUSE Leap	42.3	x86_64	graphicsmagick-debugsource	< 1.3.25-105.1	GraphicsMagick-debugsource-1.3.25-105.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	graphicsmagick-debugsource	< 1.3.29-lp150.3.12.1	GraphicsMagick-debugsource-1.3.29-lp150.3.12.1.x86_64.rpm