Security update for GraphicsMagick (low)

2018-09-2418:08:31

lists.opensuse.org

0.002 Low

EPSS

Percentile

59.1%

JSON

This update for GraphicsMagick fixes the following security issue:

CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function
(bsc#1108283).

An earlier update added a change that also fixed this issues that was
unknown at the time of release:

CVE-2018-16749: Added missing NULL check in ReadOneJNGImage that allowed
an attacker to cause a denial of service (WriteBlob assertion failure
and application exit) via a crafted file (bsc#1108282).

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64graphicsmagick-devel< 1.3.25-108.1GraphicsMagick-devel-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3i586libgraphicsmagick++-q16-12< 1.3.25-108.1libGraphicsMagick++-Q16-12-1.3.25-108.1.i586.rpm
openSUSE Leap42.3x86_64graphicsmagick-debuginfo< 1.3.25-108.1GraphicsMagick-debuginfo-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3x86_64libgraphicsmagick++-q16-12< 1.3.25-108.1libGraphicsMagick++-Q16-12-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3x86_64graphicsmagick< 1.3.25-108.1GraphicsMagick-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3x86_64perl-graphicsmagick< 1.3.25-108.1perl-GraphicsMagick-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3x86_64libgraphicsmagickwand-q16-2< 1.3.25-108.1libGraphicsMagickWand-Q16-2-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3x86_64libgraphicsmagick-q16-3-debuginfo< 1.3.25-108.1libGraphicsMagick-Q16-3-debuginfo-1.3.25-108.1.x86_64.rpm
openSUSE Leap42.3i586libgraphicsmagick-q16-3-debuginfo< 1.3.25-108.1libGraphicsMagick-Q16-3-debuginfo-1.3.25-108.1.i586.rpm
openSUSE Leap42.3x86_64libgraphicsmagick-q16-3< 1.3.25-108.1libGraphicsMagick-Q16-3-1.3.25-108.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	graphicsmagick-devel	< 1.3.25-108.1	GraphicsMagick-devel-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	i586	libgraphicsmagick++-q16-12	< 1.3.25-108.1	libGraphicsMagick++-Q16-12-1.3.25-108.1.i586.rpm
openSUSE Leap	42.3	x86_64	graphicsmagick-debuginfo	< 1.3.25-108.1	GraphicsMagick-debuginfo-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libgraphicsmagick++-q16-12	< 1.3.25-108.1	libGraphicsMagick++-Q16-12-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	graphicsmagick	< 1.3.25-108.1	GraphicsMagick-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	perl-graphicsmagick	< 1.3.25-108.1	perl-GraphicsMagick-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libgraphicsmagickwand-q16-2	< 1.3.25-108.1	libGraphicsMagickWand-Q16-2-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libgraphicsmagick-q16-3-debuginfo	< 1.3.25-108.1	libGraphicsMagick-Q16-3-debuginfo-1.3.25-108.1.x86_64.rpm
openSUSE Leap	42.3	i586	libgraphicsmagick-q16-3-debuginfo	< 1.3.25-108.1	libGraphicsMagick-Q16-3-debuginfo-1.3.25-108.1.i586.rpm
openSUSE Leap	42.3	x86_64	libgraphicsmagick-q16-3	< 1.3.25-108.1	libGraphicsMagick-Q16-3-1.3.25-108.1.x86_64.rpm