ImageMagick CVE-2017-18272 applies to GraphicsMagick
Swiss army knife of image processing
Brought to you by:
bfriesen
GraphicsMagick seem to share the issue, testcase and patch for CVE-2017-18272:
https://github.com/ImageMagick/ImageMagick/commit/7523250e2664028aa1d8f02d2d7ae49c769a851e
Attaching a patch against 15658:ebd3eb090848.
BEFORE
$ gm convert cpu-exhaustion-ReadMIFFImage /dev/null
[hangs]
AFTER
$ gm convert cpu-exhaustion-ReadMIFFImage /dev/null
gm convert: Unexpected end-of-file (cpu-exhaustion-ReadMIFFImage).
$
This fix is applied as Mercurial changeset 15701:23f53da8b9d3. Thanks for the report!
Thank you!