Synopsis:          Important: icoutils security update
Advisory ID:       SLSA-2017:0837-1
Issue Date:        2017-03-22
CVE Numbers:       CVE-2017-5208
                   CVE-2017-5333
                   CVE-2017-5332
                   CVE-2017-6009
                   CVE-2017-6010
                   CVE-2017-6011
--

Security Fix(es):

* Multiple vulnerabilities were found in icoutils, in the wrestool
program. An attacker could create a crafted executable that, when read by
wrestool, could result in memory corruption leading to a crash or
potential code execution. (CVE-2017-5208, CVE-2017-5333, CVE-2017-6009)

* A vulnerability was found in icoutils, in the wrestool program. An
attacker could create a crafted executable that, when read by wrestool,
could result in failure to allocate memory or an over-large memcpy
operation, leading to a crash. (CVE-2017-5332)

* Multiple vulnerabilities were found in icoutils, in the icotool program.
An attacker could create a crafted ICO or CUR file that, when read by
icotool, could result in memory corruption leading to a crash or potential
code execution. (CVE-2017-6010, CVE-2017-6011)
--

SL7
  x86_64
    icoutils-0.31.3-1.el7_3.x86_64.rpm
    icoutils-debuginfo-0.31.3-1.el7_3.x86_64.rpm

- Scientific Linux Development Team