File _patchinfo of Package patchinfo.5219

<patchinfo incident="5219">
  <issue id="1048289" tracker="bnc">VUL-0: EMBARGOED: CVE-2017-2862: gdk-pixbuf: Gdk-Pixbuf JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability</issue>
  <issue id="1048544" tracker="bnc">VUL-0: EMBARGOED: CVE-2017-2870: gdk-pixbuf: tiff_image_parse Code Execution Vunerability</issue>
  <issue id="1027026" tracker="bnc">VUL-1: CVE-2017-6312: gdk-pixbuf: Out-of-bounds read on io-ico.c</issue>
  <issue id="1027025" tracker="bnc">VUL-1: CVE-2017-6314: gdk-pixbuf: Infinite loop in io-tiff.c</issue>
  <issue id="1027024" tracker="bnc">VUL-1: CVE-2017-6313: gdk-pixbuf: An dangerous integer underflow in io-icns.c</issue>
  <issue id="1049877" tracker="bnc">Gradient image fails to load in ImageMagick: Unsupported number of components</issue>
  <issue id="2017-2862" tracker="cve" />
  <issue id="2017-2870" tracker="cve" />
  <issue id="2017-6314" tracker="cve" />
  <issue id="2017-6312" tracker="cve" />
  <issue id="2017-6313" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>hpjansson</packager>
  <description>This update for gdk-pixbuf fixes the following issues:

- CVE-2017-2862: JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability (bsc#1048289)
- CVE-2017-2870: tiff_image_parse Code Execution Vulnerability (bsc#1048544)
- CVE-2017-6313: A dangerous integer underflow in io-icns.c (bsc#1027024)
- CVE-2017-6314: Infinite loop in io-tiff.c (bsc#1027025)
- CVE-2017-6312: Out-of-bounds read on io-ico.c (bsc#1027026)
</description>
  <summary>Security update for gdk-pixbuf</summary>
</patchinfo>
openSUSE Build Service is sponsored by