Lucene search

K
archlinuxArch LinuxASA-201609-6
HistorySep 09, 2016 - 12:00 a.m.

graphicsmagick: multiple issues

2016-09-0900:00:00
Arch Linux
lists.archlinux.org
15

0.015 Low

EPSS

Percentile

86.9%

  1. A last instance of CVE-2016-2317 (heap buffer overflow) in the MVG
    rendering code (also impacts SVG). This problem was originally
    reported by Gustavo Grieco.

  2. A possible heap overflow of the EscapeParenthesis() function.
    While I was not able to reproduce it for myself, the implementation is
    replaced with a different algorithm. This problem was reported by
    Gustavo Grieco.

  3. The Utah RLE reader did not validate that header information was
    reasonable given the file size and so it could cause huge memory
    allocations and/or consume huge amounts of CPU. This problem was
    reported by Agostino Sarubbo.

  4. The TIFF reader had a bug pertaining to use of TIFFGetField() when
    a ‘count’ value is returned. The bug caused a heap read overflow (due
    to using strlcpy() to copy a possibly unterminated string) which could
    allow an untrusted file to crash the software.

OSVersionArchitecturePackageVersionFilename
anyanyanygraphicsmagick< 1.3.25-1UNKNOWN