OPENSUSE-SU-2019:1354-1

Vulnerability from csaf_opensuse - Published: 2019-05-09 07:45 - Updated: 2026-09-20 18:50
Summary
Security update for GraphicsMagick
Severity
Moderate
Notes
Title of the patch: Security update for GraphicsMagick
Description of the patch: This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage (boo#1133498). - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage (boo#1133501). The following fixes where modified and refreshed: - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage (boo#1132054). - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage (boo#1132053). - CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial of service in coders/xwd.c (boo#1133203). - CVE-2019-11474: Fixed a floating-point exception leading to a possible denial of service in coders/xwd.c (boo#1133202).
Patchnames: openSUSE-2019-1354
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2019-11008
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2019-11009
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 8 products, the same list as for CVE-2019-11008
Threats
Impact moderate
CVE-2019-11473
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 8 products, the same list as for CVE-2019-11008
Threats
Impact low
CVE-2019-11474
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 8 products, the same list as for CVE-2019-11008
Threats
Impact moderate
CVE-2019-11505
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2019-11008
Threats
Impact important
CVE-2019-11506
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2019-11008
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://bugzilla.suse.com/1132053 self
https://bugzilla.suse.com/1132054 self
https://bugzilla.suse.com/1133202 self
https://bugzilla.suse.com/1133203 self
https://bugzilla.suse.com/1133498 self
https://bugzilla.suse.com/1133501 self
https://www.suse.com/security/cve/CVE-2019-11008/ self
https://www.suse.com/security/cve/CVE-2019-11009/ self
https://www.suse.com/security/cve/CVE-2019-11473/ self
https://www.suse.com/security/cve/CVE-2019-11474/ self
https://www.suse.com/security/cve/CVE-2019-11505/ self
https://www.suse.com/security/cve/CVE-2019-11506/ self
https://www.suse.com/security/cve/CVE-2019-11008 external
https://bugzilla.suse.com/1132054 external
https://bugzilla.suse.com/1133202 external
https://bugzilla.suse.com/1133203 external
https://www.suse.com/security/cve/CVE-2019-11009 external
https://bugzilla.suse.com/1132053 external
https://bugzilla.suse.com/1133202 external
https://bugzilla.suse.com/1133203 external
https://www.suse.com/security/cve/CVE-2019-11473 external
https://bugzilla.suse.com/1133203 external
https://bugzilla.suse.com/1133204 external
https://www.suse.com/security/cve/CVE-2019-11474 external
https://bugzilla.suse.com/1133202 external
https://bugzilla.suse.com/1133204 external
https://www.suse.com/security/cve/CVE-2019-11505 external
https://bugzilla.suse.com/1133501 external
https://www.suse.com/security/cve/CVE-2019-11506 external
https://bugzilla.suse.com/1133498 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for GraphicsMagick",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for GraphicsMagick fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage (boo#1133498).\n- CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage (boo#1133501).\n\nThe following fixes where modified and refreshed:\n\n- CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage (boo#1132054).\n- CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage (boo#1132053).\n- CVE-2019-11473: Fixed an out-of-bounds read leading to a possible denial of service in coders/xwd.c (boo#1133203).\n- CVE-2019-11474: Fixed a floating-point exception leading to a possible denial of service in coders/xwd.c (boo#1133202). \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-1354",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1354-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:1354-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6HYKKVWYVSVGARDR6K7DUK4I55KRJYFP/#6HYKKVWYVSVGARDR6K7DUK4I55KRJYFP"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:1354-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6HYKKVWYVSVGARDR6K7DUK4I55KRJYFP/#6HYKKVWYVSVGARDR6K7DUK4I55KRJYFP"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1132053",
        "url": "https://bugzilla.suse.com/1132053"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1132054",
        "url": "https://bugzilla.suse.com/1132054"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133202",
        "url": "https://bugzilla.suse.com/1133202"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133203",
        "url": "https://bugzilla.suse.com/1133203"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133498",
        "url": "https://bugzilla.suse.com/1133498"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133501",
        "url": "https://bugzilla.suse.com/1133501"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11008 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11008/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11009 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11009/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11473 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11474 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11474/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11505 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11506 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11506/"
      }
    ],
    "title": "Security update for GraphicsMagick",
    "tracking": {
      "current_release_date": "2026-09-20T18:50:00Z",
      "generator": {
        "date": "2019-05-09T07:45:23Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:1354-1",
      "initial_release_date": "2019-05-09T07:45:23Z",
      "revision_history": [
        {
          "date": "2019-05-09T07:45:23Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T18:50:00Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/GraphicsMagick@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/GraphicsMagick-devel@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libGraphicsMagick++-Q16-12@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libGraphicsMagick++-devel@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libGraphicsMagick-Q16-3@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libGraphicsMagick3-config@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libGraphicsMagickWand-Q16-2@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                "product": {
                  "name": "perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_id": "perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.29:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/perl-GraphicsMagick@1.3.29-lp150.3.28.1?arch=x86_64\u0026upstream=GraphicsMagick-0:1.3.29-lp150.3.28.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        },
        "product_reference": "perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-11008",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11008"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11008",
          "url": "https://www.suse.com/security/cve/CVE-2019-11008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132054 for CVE-2019-11008",
          "url": "https://bugzilla.suse.com/1132054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133202 for CVE-2019-11008",
          "url": "https://bugzilla.suse.com/1133202"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133203 for CVE-2019-11008",
          "url": "https://bugzilla.suse.com/1133203"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11008"
    },
    {
      "cve": "CVE-2019-11009",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11009"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11009",
          "url": "https://www.suse.com/security/cve/CVE-2019-11009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1132053 for CVE-2019-11009",
          "url": "https://bugzilla.suse.com/1132053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133202 for CVE-2019-11009",
          "url": "https://bugzilla.suse.com/1133202"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133203 for CVE-2019-11009",
          "url": "https://bugzilla.suse.com/1133203"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11009"
    },
    {
      "cve": "CVE-2019-11473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11473",
          "url": "https://www.suse.com/security/cve/CVE-2019-11473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133203 for CVE-2019-11473",
          "url": "https://bugzilla.suse.com/1133203"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133204 for CVE-2019-11473",
          "url": "https://bugzilla.suse.com/1133204"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-11473"
    },
    {
      "cve": "CVE-2019-11474",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11474"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11474",
          "url": "https://www.suse.com/security/cve/CVE-2019-11474"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133202 for CVE-2019-11474",
          "url": "https://bugzilla.suse.com/1133202"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133204 for CVE-2019-11474",
          "url": "https://bugzilla.suse.com/1133204"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11474"
    },
    {
      "cve": "CVE-2019-11505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to MagickBitStreamMSBWrite in magick/bit_stream.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11505",
          "url": "https://www.suse.com/security/cve/CVE-2019-11505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133501 for CVE-2019-11505",
          "url": "https://bugzilla.suse.com/1133501"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11505"
    },
    {
      "cve": "CVE-2019-11506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to ExportRedQuantumType in magick/export.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
          "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11506",
          "url": "https://www.suse.com/security/cve/CVE-2019-11506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133498 for CVE-2019-11506",
          "url": "https://bugzilla.suse.com/1133498"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:GraphicsMagick-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-Q16-12-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick++-devel-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick-Q16-3-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagick3-config-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:libGraphicsMagickWand-Q16-2-0:1.3.29-lp150.3.28.1.x86_64",
            "openSUSE Leap 15.0:perl-GraphicsMagick-0:1.3.29-lp150.3.28.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-09T07:45:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11506"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.