Security update for ImageMagick
This update for ImageMagick fixes the following issues:
* CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130]
* CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]
* CVE-2016-8707 Possible code execution in Tiff conver utility [bsc#1014159]
* CVE-2016-8866 Memory allocation failure in AcquireMagickMemory could lead to Heap overflow [bsc#1009318]
* CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#1011130
VUL-0: CVE-2016-9556: ImageMagick, GraphicsMagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h)
bnc#1014159
VUL-0: CVE-2016-8707: ImageMagick: ImageMagick Convert Tiff Adobe Deflate Code Execution Vulnerability
bnc#1013376
VUL-0: CVE-2016-9773: ImageMagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Incomplete fix for CVE-2016-9556)
bnc#1009318
VUL-0: CVE-2016-8866: GraphicsMagick, ImageMagick: Memory allocation failure in AcquireMagickMemory
bnc#1011136
VUL-0: CVE-2016-9559: ImageMagick, GraphicsMagick: null pointer must never be null (tiff.c)
