https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-use-after-free-in-readwmfimage-wmf-c https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-invalid-memory-read-in-setimagecolorcallback-image-c https://blogs.gentoo.org/ago/2017/08/05/graphicsmagick-heap-based-buffer-overflow-in-readsunimage-sun-c
*** Bug 628494 has been marked as a duplicate of this bug. ***
Created attachment 490600 [details, diff] CVE-2017-12935.patch
Created attachment 490602 [details, diff] CVE-2017-12936.patch
Created attachment 490604 [details, diff] CVE-2017-12937.patch
@maintainer(s), please clean the vulnerable version from the tree.
cleanup will be tracked in bug #640690 GLSA Vote: No