Mailinglist Archive: opensuse-security-announce (74 mails)

< Previous Next >
[security-announce] openSUSE-SU-2019:1437-1: moderate: Security update for GraphicsMagick
openSUSE Security Update: Security update for GraphicsMagick

Announcement ID: openSUSE-SU-2019:1437-1
Rating: moderate
References: #1132053 #1132054 #1133202 #1133203 #1133498
Cross-References: CVE-2019-11008 CVE-2019-11009 CVE-2019-11473
CVE-2019-11474 CVE-2019-11505 CVE-2019-11506

Affected Products:
openSUSE Backports SLE-15

An update that fixes 6 vulnerabilities is now available.


This update for GraphicsMagick fixes the following issues:

Security issues fixed:

- CVE-2019-11506: Fixed a heap-based buffer overflow in the function
WriteMATLABImage (boo#1133498).
- CVE-2019-11505: Fixed a heap-based buffer overflow in the function
WritePDBImage (boo#1133501).

The following fixes where modified and refreshed:

- CVE-2019-11008: Fixed a heap-based buffer overflow in the function
WriteXWDImage (boo#1132054).
- CVE-2019-11009: Fixed a heap-based buffer over-read in the function
ReadXWDImage (boo#1132053).
- CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial
of service in coders/xwd.c (boo#1133203).
- CVE-2019-11474: Fixed a floating-point exception leading to a possible
denial of service in coders/xwd.c (boo#1133202).

This update was imported from the openSUSE:Leap:15.0:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended
installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15:

zypper in -t patch openSUSE-2019-1437=1

Package List:

- openSUSE Backports SLE-15 (x86_64):



To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security-announce+help@xxxxxxxxxxxx

< Previous Next >
This Thread
  • No further messages