Accepted imagemagick 7:6.2.4.5.dfsg1-2ubuntu1 (source)
Kees Cook
kees at ubuntu.com
Tue Oct 2 23:00:28 BST 2007
Accepted:
OK: imagemagick_6.2.4.5.dfsg1.orig.tar.gz
OK: imagemagick_6.2.4.5.dfsg1-2ubuntu1.diff.gz
OK: imagemagick_6.2.4.5.dfsg1-2ubuntu1.dsc
-> Component: main Section: graphics
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 02 Oct 2007 14:15:13 -0700
Source: imagemagick
Binary: perlmagick libmagick9 libmagick9-dev imagemagick libmagick++9-dev libmagick++9c2a
Architecture: source
Version: 7:6.2.4.5.dfsg1-2ubuntu1
Distribution: gutsy
Urgency: high
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description:
imagemagick - Image manipulation programs
libmagick++9-dev - The object-oriented C++ API to the ImageMagick library--developme
libmagick++9c2a - The object-oriented C++ API to the ImageMagick library
libmagick9 - Image manipulation library
libmagick9-dev - Image manipulation library -- development
perlmagick - A perl interface to the libMagick graphics routines
Closes: 444267
Changes:
imagemagick (7:6.2.4.5.dfsg1-2ubuntu1) gutsy; urgency=low
.
* Merge with Debian unstable for CVE fixes. Remaining changes:
- Magick++/lib/Geometry.cpp: build fix for g++-4.3.
- debian/control: Ubuntu maintainer address.
.
imagemagick (7:6.2.4.5.dfsg1-2) unstable; urgency=high
.
* Fix multiple vulnerabilities in imagemagick. Closes: #444267
+ magick/memory.c,magick/memory_.h,magick/methods.h: Add new allocator
wrapper AcquireQuantumMemory() to prevent potential integer overflows.
Backport from upstream version 6.3.5.9.
+ magick/image.c: Backport new implementation of SetImageExtent() from
upstream version 6.3.5.9.
+ coders/dcm.c,coders/xcf.c: Fix integer overflow in DCM and XCF coders.
(CVE-2007-4985) Backport of upstream patch from version 6.3.5.9.
+ coders/dcm.c,coders/dib.c,coders/xbm.c,coders/xcf.c,coders/xwd.c:
Fix multiple integer overflows in DCM, DIB, XBM, XCF, and XWD coders.
(CVE-2007-4986 and CVE-2007-4988) Based on upstream patch from
version 6.3.5.9.
+ magick/blob.c: Fix fencepost error in ReadBlobString()
(CVE-2007-4987) Backport of upstream patch from version 6.3.5.9.
+ coders/dib.c: Ensure positive value for image rows and columns.
Based on upstream patch from version 6.3.5.9.
+ All of the above patches have been derived from backports supplied by
Jonathan Smith.
Files:
aa275acc73eb9be2bedc9c79240f17ac 1149 graphics optional imagemagick_6.2.4.5.dfsg1-2ubuntu1.dsc
1db9a63854c4b589581997715337cee7 103157 graphics optional imagemagick_6.2.4.5.dfsg1-2ubuntu1.diff.gz
Original-Maintainer: Luciano Bello <luciano at linux.org.ar>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHAr2UH/9LqRcGPm0RArmxAJ0bzJthca92EoUSI37lMhJhrjJc2QCcCXL8
siZmVGvy0Jjfjyefe5lrJJg=
=6Zks
-----END PGP SIGNATURE-----
More information about the gutsy-changes
mailing list