File _patchinfo of Package patchinfo.11270

<patchinfo incident="11270">
  <issue tracker="bnc" id="1024288">VUL-1: CVE-2017-2579: netpbm: Out-of-bounds read in expandCodeOntoStack()</issue>
  <issue tracker="bnc" id="1024291">VUL-0: CVE-2017-2580: netpbm: Out-of-bounds write of heap data in addPixelToRaster() function</issue>
  <issue tracker="bnc" id="1136936">VUL-0: netpbm: disable / move out postscript decoding using ghostscript</issue>
  <issue tracker="cve" id="2017-2580"/>
  <issue tracker="cve" id="2017-2579"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>pgajdos</packager>
  <description>This update for netpbm fixes the following issues:

Security issues fixed:

- CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288).
- CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291).
- create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936)

</description>
  <summary>Security update for netpbm</summary>
</patchinfo>