File _patchinfo of Package patchinfo.7894
<patchinfo incident="7894">
<issue tracker="bnc" id="1086777">VUL-1: CVE-2018-8975: netpbm: The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03allows remote attackers to cause a denial of service (heap-based bufferover-read) via a crafted image file, as demonstrated by pb</issue>
<issue tracker="cve" id="2018-8975"/>
<category>security</category>
<rating>moderate</rating>
<packager>pgajdos</packager>
<description>This update for netpbm fixes the following issues:
- CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause
a denial of service (heap-based buffer over-read) via a crafted image file
(bsc#1086777).
</description>
<summary>Security update for netpbm</summary>
</patchinfo>