<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for ImageMagick</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2017:0023-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2017-01-04T13:14:08Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2017-01-04T13:14:08Z</InitialReleaseDate>
    <CurrentReleaseDate>2017-01-04T13:14:08Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for ImageMagick</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for ImageMagick fixes the following issues:

  * CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130]
  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]
  * CVE-2016-8707 Possible code execution in Tiff conver utility [bsc#1014159]
  * CVE-2016-8866 Memory allocation failure in AcquireMagickMemory could lead to Heap overflow [bsc#1009318]
  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]

This update was imported from the SUSE:SLE-12:Update update project.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      <Description>E-Mail link for openSUSE-SU-2017:0023-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="openSUSE Leap 42.1">
      <Branch Type="Product Name" Name="openSUSE Leap 42.1">
        <FullProductName ProductID="openSUSE Leap 42.1">openSUSE Leap 42.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 42.2">
      <Branch Type="Product Name" Name="openSUSE Leap 42.2">
        <FullProductName ProductID="openSUSE Leap 42.2">openSUSE Leap 42.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-6.8.8.1-25.1">
      <FullProductName ProductID="ImageMagick-6.8.8.1-25.1">ImageMagick-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-devel-6.8.8.1-25.1">
      <FullProductName ProductID="ImageMagick-devel-6.8.8.1-25.1">ImageMagick-devel-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-devel-32bit-6.8.8.1-25.1">
      <FullProductName ProductID="ImageMagick-devel-32bit-6.8.8.1-25.1">ImageMagick-devel-32bit-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-doc-6.8.8.1-25.1">
      <FullProductName ProductID="ImageMagick-doc-6.8.8.1-25.1">ImageMagick-doc-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-extra-6.8.8.1-25.1">
      <FullProductName ProductID="ImageMagick-extra-6.8.8.1-25.1">ImageMagick-extra-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-3-6.8.8.1-25.1">
      <FullProductName ProductID="libMagick++-6_Q16-3-6.8.8.1-25.1">libMagick++-6_Q16-3-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1">
      <FullProductName ProductID="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1">libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-devel-6.8.8.1-25.1">
      <FullProductName ProductID="libMagick++-devel-6.8.8.1-25.1">libMagick++-devel-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-devel-32bit-6.8.8.1-25.1">
      <FullProductName ProductID="libMagick++-devel-32bit-6.8.8.1-25.1">libMagick++-devel-32bit-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-1-6.8.8.1-25.1">
      <FullProductName ProductID="libMagickCore-6_Q16-1-6.8.8.1-25.1">libMagickCore-6_Q16-1-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1">
      <FullProductName ProductID="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1">libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-1-6.8.8.1-25.1">
      <FullProductName ProductID="libMagickWand-6_Q16-1-6.8.8.1-25.1">libMagickWand-6_Q16-1-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1">
      <FullProductName ProductID="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1">libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="perl-PerlMagick-6.8.8.1-25.1">
      <FullProductName ProductID="perl-PerlMagick-6.8.8.1-25.1">perl-PerlMagick-6.8.8.1-25.1</FullProductName>
    </Branch>
    <Relationship ProductReference="ImageMagick-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1">ImageMagick-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1">ImageMagick-devel-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1">ImageMagick-devel-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-doc-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1">ImageMagick-doc-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-extra-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1">ImageMagick-extra-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-3-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1">libMagick++-6_Q16-3-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1">libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1">libMagick++-devel-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1">libMagick++-devel-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-1-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1">libMagickCore-6_Q16-1-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1">libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-1-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1">libMagickWand-6_Q16-1-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1">libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="perl-PerlMagick-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1">perl-PerlMagick-6.8.8.1-25.1 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1">ImageMagick-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1">ImageMagick-devel-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1">ImageMagick-devel-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-doc-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1">ImageMagick-doc-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-extra-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1">ImageMagick-extra-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-3-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1">libMagick++-6_Q16-3-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1">libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1">libMagick++-devel-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1">libMagick++-devel-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-1-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1">libMagickCore-6_Q16-1-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1">libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-1-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1">libMagickWand-6_Q16-1-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1">libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="perl-PerlMagick-6.8.8.1-25.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1">perl-PerlMagick-6.8.8.1-25.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).</Note>
    </Notes>
    <CVE>CVE-2014-9848</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-9848.html</URL>
        <Description>CVE-2014-9848</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/982969</URL>
        <Description>SUSE Bug 982969</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/984404</URL>
        <Description>SUSE Bug 984404</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.</Note>
    </Notes>
    <CVE>CVE-2016-8707</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8707.html</URL>
        <Description>CVE-2016-8707</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1014159</URL>
        <Description>SUSE Bug 1014159</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.</Note>
    </Notes>
    <CVE>CVE-2016-8866</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.1</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8866.html</URL>
        <Description>CVE-2016-8866</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1007245</URL>
        <Description>SUSE Bug 1007245</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1009318</URL>
        <Description>SUSE Bug 1009318</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1031267</URL>
        <Description>SUSE Bug 1031267</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.</Note>
    </Notes>
    <CVE>CVE-2016-9556</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-9556.html</URL>
        <Description>CVE-2016-9556</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1011130</URL>
        <Description>SUSE Bug 1011130</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1013376</URL>
        <Description>SUSE Bug 1013376</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.</Note>
    </Notes>
    <CVE>CVE-2016-9559</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-9559.html</URL>
        <Description>CVE-2016-9559</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1011136</URL>
        <Description>SUSE Bug 1011136</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.</Note>
    </Notes>
    <CVE>CVE-2016-9773</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.1:perl-PerlMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-doc-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:ImageMagick-extra-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-6_Q16-3-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagick++-devel-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickCore-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:libMagickWand-6_Q16-1-6.8.8.1-25.1</ProductID>
        <ProductID>openSUSE Leap 42.2:perl-PerlMagick-6.8.8.1-25.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-9773.html</URL>
        <Description>CVE-2016-9773</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1011130</URL>
        <Description>SUSE Bug 1011130</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1013376</URL>
        <Description>SUSE Bug 1013376</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1017421</URL>
        <Description>SUSE Bug 1017421</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
