icoutils-0.31.3-1.el7

The icoutils are a set of programs for extracting and converting images in
Microsoft Windows icon and cursor files. These files usually have the
extension .ico or .cur, but they can also be embedded in executables or
libraries.

Security issues fixed with this release:

CVE-2017-5208
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2017-5332
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2017-5333
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2017-6009
An issue was discovered in icoutils 0.31.1. A buffer overflow was
observed in the "decode_ne_resource_id" function in the "restable.c"
source file. This is happening because the "len" parameter for memcpy
is not checked for size and thus becomes a negative integer in the
process, resulting in a failed memcpy. This affects wrestool.
CVE-2017-6010
An issue was discovered in icoutils 0.31.1. A buffer overflow was
observed in the "extract_icons" function in the "extract.c" source
file. This issue can be triggered by processing a corrupted ico file
and will result in an icotool crash.
CVE-2017-6011
An issue was discovered in icoutils 0.31.1. An out-of-bounds read
leading to a buffer overflow was observed in the "simple_vec" function
in the "extract.c" source file. This affects icotool.