Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues:
- CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852)
- CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321).
- CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364).
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#1160364
VUL-1: CVE-2019-19953: GraphicsMagick: heap-based buffer over-read in the function EncodeImage of coders/pict.c
bnc#1160321
VUL-1: CVE-2019-19951: GraphicsMagick: heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c
bnc#1159852
VUL-1: CVE-2019-19950: GraphicsMagick: use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
