[Bug 103843] [Syn request] Sync graphicsmagick (1.1.7-14) from Debian unstable (main)

[Michael Bienia]

Public bug reported:

Binary package hint: graphicsmagick

Please sync graphicsmagick (1.1.7-14) from Debian unstable (main).

The Ubuntu package has no changes.

The package builds cleanly in a feisty pbuilder.

Thanks.

Changelog:

graphicsmagick (1.1.7-14) unstable; urgency=high

  * magick/image.c: Fix heap overflow in GrayscalePseudoClassImage() on
    64bit architectures. (Turned up by Sami Liedes' segv2.viff test case.)
    Closes: #418052, #416096
  * magick/utility.h: Avoid double free() when calling MagickReallocMemory()
    with zero size argument. (Triggered by Sami Liedes' segv2.viff test case.)
    Closes: #418053
  * coders/tiff.c: Fix segfault with certain TIFF images on amd64 due to
    va_list reusal in bogus duplicate vsprintf() call. Thanks to Kurt
    Roeckx for the fix. Closes: #415467
  * coders/viff.c: Add sanity check to prevent heap overflow reading corrupt
    viff images. (Triggered by Sami Liedes' segv.viff test case.)
    Closes: #418054
  * coders/xwd.c: Fix integer overflow in XWD coders. (Triggered by Sami
    Liedes' broken.xwd test case.) Original patch thanks to Larry
    Doolittle. Closes: #417862

 -- Daniel Kobras <kobras at debian.org>  Fri,  6 Apr 2007 17:50:35 +0200

** Affects: graphicsmagick (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Changed in: graphicsmagick (Ubuntu)
       Status: Unconfirmed => Confirmed

** Summary changed:

- [Syn request] Sync graphicsmagick (1.1.7-14) from Debian unstable (main)
+ [Sync request] Sync graphicsmagick (1.1.7-14) from Debian unstable (main)

-- 
[Sync request] Sync graphicsmagick (1.1.7-14) from Debian unstable (main)
https://bugs.launchpad.net/bugs/103843
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.