File _patchinfo of Package patchinfo.7563
<patchinfo incident="7563">
<issue id="1051847" tracker="bnc">VUL-1: CVE-2017-12140: ImageMagick: ReadDCMImage in coders\dcm.c has a ninteger signedness error leading to excessive memory consumption</issue>
<issue id="1061587" tracker="bnc">VUL-0: CVE-2017-14994: GraphicsMagick: denial of service (NULL pointer) in ReadDCMImage in coders/dcm.c</issue>
<issue id="1052758" tracker="bnc">VUL-1: CVE-2017-12662: GraphicsMagick, ImageMagick: Memory leak in WritePDFImage in coders/pdf.c</issue>
<issue id="1060577" tracker="bnc">VUL-0: CVE-2017-14733: GraphicsMagick: Heap overflow on ReadRLEImage in coders/rle.c could lead to denial of service</issue>
<issue id="1052764" tracker="bnc">VUL-1: CVE-2017-12644: ImageMagick: Memory leak in ReadDCMImage in coders\dcm.c</issue>
<issue id="1047054" tracker="bnc">VUL-1: CVE-2017-10799: GraphicsMagick,ImageMagick: denial of service (OOM) can occur inReadDPXImage().</issue>
<issue id="2017-14733" tracker="cve" />
<issue id="2017-14994" tracker="cve" />
<issue id="2017-10799" tracker="cve" />
<issue id="2017-12140" tracker="cve" />
<issue id="2017-12662" tracker="cve" />
<issue id="2017-12644" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>pgajdos</packager>
<description>This update for GraphicsMagick fixes the following issues:
* CVE-2017-12140: ReadDCMImage in coders\dcm.c has a ninteger signedness error
leading to excessive memory consumption (bnc#1051847)
* CVE-2017-14994: NULL pointer in ReadDCMImage in coders/dcm.c could lead to denial of service (bnc#1061587)
* CVE-2017-12662: Memory leak in WritePDFImage in coders/pdf.c could lead to denial of service (bnc#1052758)
* CVE-2017-14733: Heap overflow on ReadRLEImage in coders/rle.c could lead to denial of service (bnc#1060577)
* CVE-2017-12644: Memory leak in ReadDCMImage in coders\dcm.c could lead to denial of service (bnc#1052764)
* CVE-2017-10799: denial of service (OOM) can occur inReadDPXImage() (bnc#1047054)
</description>
<summary>Security update for GraphicsMagick</summary>
</patchinfo>