<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for ImageMagick</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2016:2671-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2016-10-28T15:35:15Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2016-10-28T15:35:15Z</InitialReleaseDate>
    <CurrentReleaseDate>2016-10-28T15:35:15Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for ImageMagick</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This update for ImageMagick fixes the following issues:

- CVE-2016-8684: Mismatch between real filesize and header values (bsc#1005123)
- CVE-2016-8683: Check that filesize is reasonable compared to the header value (bsc#1005127)
- CVE-2016-8682: Stack-buffer read overflow while reading SCT header (bsc#1005125)
- CVE-2016-8677: Memory allocation failure in AcquireQuantumPixels (bsc#1005328)
- CVE-2016-7996, CVE-2016-7997: WPG Reader Issues (bsc#1003629)
- CVE-2016-7800: 8BIM/8BIMW unsigned underflow leads to heap overflow (bsc#1002422)
- CVE-2016-7799: Mogrify global buffer overflow (bsc#1002421)
- CVE-2016-7540: Writing to RGF format aborts (bsc#1000394)
- CVE-2016-7539: Potential DOS by not releasing memory (bsc#1000715)
- CVE-2016-7538: SIGABRT for corrupted pdb file (bsc#1000712)
- CVE-2016-7537: Out of bound access for corrupted pdb file (bsc#1000711)
- CVE-2016-7536: SEGV reported in corrupted profile handling (bsc#1000710)
- CVE-2016-7535: Out of bound access for corrupted psd file (bsc#1000709)
- CVE-2016-7534: Out of bound access in generic decoder (bsc#1000708)
- CVE-2016-7533: Wpg file out of bound for corrupted file (bsc#1000707)
- CVE-2016-7532: Fix handling of corrupted psd file (bsc#1000706)
- CVE-2016-7531: Pbd file out of bound access (bsc#1000704)
- CVE-2016-7530: Out of bound in quantum handling (bsc#1000703)
- CVE-2016-7529: Out of bound in quantum handling (bsc#1000399)
- CVE-2016-7528: Out of bound access in xcf file coder (bsc#1000434)
- CVE-2016-7527: Out of bound access in wpg file coder: (bsc#1000436)
- CVE-2016-7525: Heap buffer overflow in psd file coder (bsc#1000701)
- CVE-2016-7524: AddressSanitizer:heap-buffer-overflow READ of size 1 in meta.c:465 (bsc#1000700)
- CVE-2016-7523: AddressSanitizer:heap-buffer-overflow READ of size 1 meta.c:496 (bsc#1000699)
- CVE-2016-7522: Out of bound access for malformed psd file (bsc#1000698)
- CVE-2016-7521: Heap buffer overflow in psd file handling (bsc#1000697)
- CVE-2016-7520: Heap overflow in hdr file handling (bsc#1000696)
- CVE-2016-7519: Out-of-bounds read in coders/rle.c (bsc#1000695)
- CVE-2016-7518: Out-of-bounds read in coders/sun.c (bsc#1000694)
- CVE-2016-7517: Out-of-bounds read in coders/pict.c (bsc#1000693)
- CVE-2016-7516: Out of bounds problem in rle, pict, viff and sun files (bsc#1000692)
- CVE-2016-7515: Rle file handling for corrupted file (bsc#1000689)
- CVE-2016-7514: Out-of-bounds read in coders/psd.c (bsc#1000688)
- CVE-2016-7513: Off-by-one error leading to segfault (bsc#1000686)
- CVE-2016-7101: SGI Coder Out-Of-Bounds Read Vulnerability (bsc#1001221)
- CVE-2016-6823: BMP Coder Out-Of-Bounds Write Vulnerability (bsc#1001066)
- CVE-2015-8959: DOS due to corrupted DDS files (bsc#1000713)
- CVE-2015-8958: Potential DOS in sun file handling due to malformed files (bsc#1000691)
- CVE-2015-8957: Buffer overflow in sun file handling (bsc#1000690)
- CVE-2014-9907: DOS due to corrupted DDS files (bsc#1000714)
- Divide by zero in WriteTIFFImage (bsc#1002206)
- Buffer overflows in SIXEL, PDB, MAP, and TIFF coders (bsc#1002209)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      <Description>E-Mail link for openSUSE-SU-2016:2671-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE 13.2">
      <Branch Type="Product Name" Name="openSUSE 13.2">
        <FullProductName ProductID="openSUSE 13.2">openSUSE 13.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-6.8.9.8-34.1">ImageMagick-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-debuginfo-6.8.9.8-34.1">ImageMagick-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-debugsource-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-debugsource-6.8.9.8-34.1">ImageMagick-debugsource-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-devel-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-devel-6.8.9.8-34.1">ImageMagick-devel-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-devel-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-devel-32bit-6.8.9.8-34.1">ImageMagick-devel-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-doc-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-doc-6.8.9.8-34.1">ImageMagick-doc-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-extra-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-extra-6.8.9.8-34.1">ImageMagick-extra-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ImageMagick-extra-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="ImageMagick-extra-debuginfo-6.8.9.8-34.1">ImageMagick-extra-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-5-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-6_Q16-5-6.8.9.8-34.1">libMagick++-6_Q16-5-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-5-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-6_Q16-5-32bit-6.8.9.8-34.1">libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1">libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1">libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-devel-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-devel-6.8.9.8-34.1">libMagick++-devel-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagick++-devel-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagick++-devel-32bit-6.8.9.8-34.1">libMagick++-devel-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-2-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickCore-6_Q16-2-6.8.9.8-34.1">libMagickCore-6_Q16-2-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1">libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1">libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-2-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickWand-6_Q16-2-6.8.9.8-34.1">libMagickWand-6_Q16-2-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1">libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1">libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">
      <FullProductName ProductID="libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="perl-PerlMagick-6.8.9.8-34.1">
      <FullProductName ProductID="perl-PerlMagick-6.8.9.8-34.1">perl-PerlMagick-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="perl-PerlMagick-debuginfo-6.8.9.8-34.1">
      <FullProductName ProductID="perl-PerlMagick-debuginfo-6.8.9.8-34.1">perl-PerlMagick-debuginfo-6.8.9.8-34.1</FullProductName>
    </Branch>
    <Relationship ProductReference="ImageMagick-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-6.8.9.8-34.1">ImageMagick-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1">ImageMagick-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-debugsource-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1">ImageMagick-debugsource-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1">ImageMagick-devel-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-devel-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1">ImageMagick-devel-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-doc-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1">ImageMagick-doc-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-extra-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1">ImageMagick-extra-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ImageMagick-extra-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1">ImageMagick-extra-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-5-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1">libMagick++-6_Q16-5-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-5-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1">libMagick++-6_Q16-5-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1">libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1">libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1">libMagick++-devel-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagick++-devel-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1">libMagick++-devel-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-2-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1">libMagickCore-6_Q16-2-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1">libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1">libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-2-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1">libMagickWand-6_Q16-2-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1">libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1">libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1">libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="perl-PerlMagick-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1">perl-PerlMagick-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="perl-PerlMagick-debuginfo-6.8.9.8-34.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1">perl-PerlMagick-debuginfo-6.8.9.8-34.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.</Note>
    </Notes>
    <CVE>CVE-2014-9907</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-9907.html</URL>
        <Description>CVE-2014-9907</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000714</URL>
        <Description>SUSE Bug 1000714</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.</Note>
    </Notes>
    <CVE>CVE-2015-8957</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8957.html</URL>
        <Description>CVE-2015-8957</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000690</URL>
        <Description>SUSE Bug 1000690</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000691</URL>
        <Description>SUSE Bug 1000691</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.</Note>
    </Notes>
    <CVE>CVE-2015-8958</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8958.html</URL>
        <Description>CVE-2015-8958</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000690</URL>
        <Description>SUSE Bug 1000690</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000691</URL>
        <Description>SUSE Bug 1000691</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000694</URL>
        <Description>SUSE Bug 1000694</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1028079</URL>
        <Description>SUSE Bug 1028079</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file.</Note>
    </Notes>
    <CVE>CVE-2015-8959</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8959.html</URL>
        <Description>CVE-2015-8959</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000713</URL>
        <Description>SUSE Bug 1000713</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.</Note>
    </Notes>
    <CVE>CVE-2016-6823</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:P/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-6823.html</URL>
        <Description>CVE-2016-6823</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1001066</URL>
        <Description>SUSE Bug 1001066</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1002207</URL>
        <Description>SUSE Bug 1002207</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.</Note>
    </Notes>
    <CVE>CVE-2016-7101</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7101.html</URL>
        <Description>CVE-2016-7101</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1001221</URL>
        <Description>SUSE Bug 1001221</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1002207</URL>
        <Description>SUSE Bug 1002207</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2016-7513</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7513.html</URL>
        <Description>CVE-2016-7513</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000686</URL>
        <Description>SUSE Bug 1000686</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7514</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7514.html</URL>
        <Description>CVE-2016-7514</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000688</URL>
        <Description>SUSE Bug 1000688</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.</Note>
    </Notes>
    <CVE>CVE-2016-7515</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7515.html</URL>
        <Description>CVE-2016-7515</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000689</URL>
        <Description>SUSE Bug 1000689</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000695</URL>
        <Description>SUSE Bug 1000695</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file.</Note>
    </Notes>
    <CVE>CVE-2016-7516</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7516.html</URL>
        <Description>CVE-2016-7516</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000692</URL>
        <Description>SUSE Bug 1000692</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000693</URL>
        <Description>SUSE Bug 1000693</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000695</URL>
        <Description>SUSE Bug 1000695</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.</Note>
    </Notes>
    <CVE>CVE-2016-7517</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7517.html</URL>
        <Description>CVE-2016-7517</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000693</URL>
        <Description>SUSE Bug 1000693</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file.</Note>
    </Notes>
    <CVE>CVE-2016-7518</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7518.html</URL>
        <Description>CVE-2016-7518</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000694</URL>
        <Description>SUSE Bug 1000694</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1028079</URL>
        <Description>SUSE Bug 1028079</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7519</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7519.html</URL>
        <Description>CVE-2016-7519</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000689</URL>
        <Description>SUSE Bug 1000689</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000695</URL>
        <Description>SUSE Bug 1000695</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.</Note>
    </Notes>
    <CVE>CVE-2016-7520</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7520.html</URL>
        <Description>CVE-2016-7520</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000696</URL>
        <Description>SUSE Bug 1000696</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7521</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7521.html</URL>
        <Description>CVE-2016-7521</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000697</URL>
        <Description>SUSE Bug 1000697</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7522</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7522.html</URL>
        <Description>CVE-2016-7522</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000698</URL>
        <Description>SUSE Bug 1000698</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.</Note>
    </Notes>
    <CVE>CVE-2016-7523</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7523.html</URL>
        <Description>CVE-2016-7523</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000699</URL>
        <Description>SUSE Bug 1000699</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.</Note>
    </Notes>
    <CVE>CVE-2016-7524</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7524.html</URL>
        <Description>CVE-2016-7524</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000700</URL>
        <Description>SUSE Bug 1000700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1002422</URL>
        <Description>SUSE Bug 1002422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7525</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7525.html</URL>
        <Description>CVE-2016-7525</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000688</URL>
        <Description>SUSE Bug 1000688</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000701</URL>
        <Description>SUSE Bug 1000701</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7527</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7527.html</URL>
        <Description>CVE-2016-7527</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000436</URL>
        <Description>SUSE Bug 1000436</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000702</URL>
        <Description>SUSE Bug 1000702</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.</Note>
    </Notes>
    <CVE>CVE-2016-7528</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7528.html</URL>
        <Description>CVE-2016-7528</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000434</URL>
        <Description>SUSE Bug 1000434</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.</Note>
    </Notes>
    <CVE>CVE-2016-7529</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.3</BaseScore>
        <Vector>AV:N/AC:M/Au:S/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7529.html</URL>
        <Description>CVE-2016-7529</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000399</URL>
        <Description>SUSE Bug 1000399</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000434</URL>
        <Description>SUSE Bug 1000434</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000703</URL>
        <Description>SUSE Bug 1000703</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7530</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7530.html</URL>
        <Description>CVE-2016-7530</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000399</URL>
        <Description>SUSE Bug 1000399</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000703</URL>
        <Description>SUSE Bug 1000703</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.</Note>
    </Notes>
    <CVE>CVE-2016-7531</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7531.html</URL>
        <Description>CVE-2016-7531</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000704</URL>
        <Description>SUSE Bug 1000704</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7532</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7532.html</URL>
        <Description>CVE-2016-7532</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000706</URL>
        <Description>SUSE Bug 1000706</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file.</Note>
    </Notes>
    <CVE>CVE-2016-7533</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7533.html</URL>
        <Description>CVE-2016-7533</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000707</URL>
        <Description>SUSE Bug 1000707</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7534</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7534.html</URL>
        <Description>CVE-2016-7534</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000708</URL>
        <Description>SUSE Bug 1000708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.</Note>
    </Notes>
    <CVE>CVE-2016-7535</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7535.html</URL>
        <Description>CVE-2016-7535</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000709</URL>
        <Description>SUSE Bug 1000709</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile.</Note>
    </Notes>
    <CVE>CVE-2016-7536</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7536.html</URL>
        <Description>CVE-2016-7536</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000710</URL>
        <Description>SUSE Bug 1000710</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.</Note>
    </Notes>
    <CVE>CVE-2016-7537</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>4.3</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7537.html</URL>
        <Description>CVE-2016-7537</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000711</URL>
        <Description>SUSE Bug 1000711</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7538</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7538.html</URL>
        <Description>CVE-2016-7538</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000712</URL>
        <Description>SUSE Bug 1000712</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2016-7539</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7539.html</URL>
        <Description>CVE-2016-7539</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000715</URL>
        <Description>SUSE Bug 1000715</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format.</Note>
    </Notes>
    <CVE>CVE-2016-7540</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7540.html</URL>
        <Description>CVE-2016-7540</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1000394</URL>
        <Description>SUSE Bug 1000394</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.</Note>
    </Notes>
    <CVE>CVE-2016-7799</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7799.html</URL>
        <Description>CVE-2016-7799</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1002421</URL>
        <Description>SUSE Bug 1002421</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.</Note>
    </Notes>
    <CVE>CVE-2016-7800</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7800.html</URL>
        <Description>CVE-2016-7800</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1002422</URL>
        <Description>SUSE Bug 1002422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.</Note>
    </Notes>
    <CVE>CVE-2016-7996</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7996.html</URL>
        <Description>CVE-2016-7996</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1003629</URL>
        <Description>SUSE Bug 1003629</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.</Note>
    </Notes>
    <CVE>CVE-2016-7997</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-7997.html</URL>
        <Description>CVE-2016-7997</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1003629</URL>
        <Description>SUSE Bug 1003629</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.</Note>
    </Notes>
    <CVE>CVE-2016-8677</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8677.html</URL>
        <Description>CVE-2016-8677</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005328</URL>
        <Description>SUSE Bug 1005328</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="39">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.</Note>
    </Notes>
    <CVE>CVE-2016-8682</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8682.html</URL>
        <Description>CVE-2016-8682</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005125</URL>
        <Description>SUSE Bug 1005125</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="40">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."</Note>
    </Notes>
    <CVE>CVE-2016-8683</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8683.html</URL>
        <Description>CVE-2016-8683</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005127</URL>
        <Description>SUSE Bug 1005127</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="41">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."</Note>
    </Notes>
    <CVE>CVE-2016-8684</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:ImageMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-debugsource-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-doc-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:ImageMagick-extra-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-6_Q16-5-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagick++-devel-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickCore-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:libMagickWand-6_Q16-2-debuginfo-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-6.8.9.8-34.1</ProductID>
        <ProductID>openSUSE 13.2:perl-PerlMagick-debuginfo-6.8.9.8-34.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.1</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:N/I:N/A:C</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-8684.html</URL>
        <Description>CVE-2016-8684</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005123</URL>
        <Description>SUSE Bug 1005123</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
