A flaw was found in ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file.
Created ImageMagick tracking bugs for this issue:
Affects: fedora-all [bug 1637187]
This issue did not affect the versions of ImageMagick as shipped with Red Hat Enterprise Linux 5, 6, and 7.
openshift-enterprise-3: notaffected as RHEL-7 is notaffected. Removed openshift-enterprise-3 from whiteboard.