File _patchinfo of Package patchinfo.7894

<patchinfo incident="7894">
  <issue tracker="bnc" id="1086777">VUL-1: CVE-2018-8975: netpbm: The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03allows remote attackers to cause a denial of service (heap-based bufferover-read) via a crafted image file, as demonstrated by pb</issue>
  <issue tracker="cve" id="2018-8975"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>pgajdos</packager>
  <description>This update for netpbm fixes the following issues:

- CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause
  a denial of service (heap-based buffer over-read) via a crafted image file
  (bsc#1086777).
</description>
  <summary>Security update for netpbm</summary>
</patchinfo>
openSUSE Build Service is sponsored by