Hello community, here is the log from the commit of package patchinfo.5903 for openSUSE:13.2:Update checked in at 2016-12-06 12:42:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/patchinfo.5903 (Old) and /work/SRC/openSUSE:13.2:Update/.patchinfo.5903.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.5903" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="5903"> <issue id="1011130" tracker="bnc">VUL-0: CVE-2016-9556: ImageMagick, GraphicsMagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h)</issue> <issue id="1011136" tracker="bnc">VUL-0: CVE-2016-9559: ImageMagick, GraphicsMagick: null pointer must never be null (tiff.c)</issue> <issue id="2016-9556" tracker="cve" /> <issue id="2016-9559" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>pgajdos</packager> <description> This update for GraphicsMagick fixes the following security issues: - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines (boo#1011130) - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format detection routines for TIFF (boo#1011136) </description> <summary>Security update for ImageMagick</summary> </patchinfo>