Lucene search

K
suseSuseOPENSUSE-SU-2020:0145-1
HistoryJan 29, 2020 - 12:00 a.m.

Security update for GraphicsMagick (moderate)

2020-01-2900:00:00
lists.opensuse.org
54

EPSS

0.012

Percentile

85.3%

An update that fixes three vulnerabilities is now available.

Description:

This update for GraphicsMagick fixes the following issues:

  • CVE-2019-19950: Fixed a use-after-free in ThrowException and
    ThrowLoggedException of magick/error.c. (boo#1159852)
  • CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels()
    (boo#1160321).
  • CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage()
    (boo#1160364).

This update was imported from the openSUSE:Leap:15.1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15-SP1:

    zypper in -t patch openSUSE-2020-145=1