File _patchinfo of Package patchinfo.9073
<patchinfo incident="9073">
<issue tracker="bnc" id="1106254">ImageMagick: `-morphology EdgeIn` does not extract edge points</issue>
<issue id="2018-18024" tracker="cve" />
<issue id="2018-18016" tracker="cve" />
<issue id="2018-17966" tracker="cve" />
<issue id="1111069" tracker="bnc">VUL-1: CVE-2018-18024: GraphicsMagick,ImageMagick: infinite loop in the ReadBMPImage function of the coders/bmp.c file</issue>
<issue id="1111072" tracker="bnc">VUL-1: CVE-2018-18016: GraphicsMagick,ImageMagick: ImageMagick: memory leak in WritePCXImage in coders/pcx.c</issue>
<issue id="1110746" tracker="bnc">VUL-1: CVE-2018-17966: ImageMagick: Memory leak vulnerability in WritePDBImage</issue>
<category>security</category>
<rating>moderate</rating>
<packager>pgajdos</packager>
<description>This update for ImageMagick fixes the following issues:
Security issues fixed:
- CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function.
Remote attackers could leverage this vulnerability to cause a denial
of service via a crafted bmp file. (bsc#1111069)
- CVE-2018-18016: Fixed a memory leak in WritePCXImage (bsc#1111072).
- CVE-2018-17966: Fixed a memory leak in WritePDBImage (bsc#1110746).
Non security issues fixed:
- Fixed -morphology EdgeIn output (bsc#1106254)
</description>
<summary>Security update for ImageMagick</summary>
</patchinfo>