A flaw was found in ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file. References: https://github.com/ImageMagick/ImageMagick/issues/1335
Created ImageMagick tracking bugs for this issue: Affects: fedora-all [bug 1637192]
Statement: This issue did not affect the versions of ImageMagick as shipped with Red Hat Enterprise Linux 5, 6, and 7.
openshift-enterprise-3: notaffected as RHEL-7 is notaffected. Removed openshift-enterprise-3 from whiteboard.