lp://staging/ubuntu/precise-updates/imagemagick

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

36. By Marc Deslauriers on 2014-03-06

* SECURITY UPDATE: denial of service and possible code execution via psd
  images processing rle decoding buffer overflow
  - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
  - CVE-2014-1958
* SECURITY UPDATE: denial of service via jpeg images with specially-
  crafted restart markers
  - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
    coders/psd.c.
  - CVE-2014-2030
* SECURITY UPDATE: denial of service via crafted sequence of restart
  markers
  - debian/patches/CVE-2012-0260.patch: limit number of warnings in
    coders/jpeg.c.
  - CVE-2012-0260

35. By Jamie Strandboge on 2012-08-17

* SECURITY UPDATE: denial of service via large resource consumption
  - debian/patches/CVE-2012-3437.patch: always use correct size argument
    with libpng memory allocation
  - CVE-2012-3437

34. By Marc Deslauriers on 2012-04-25

* SECURITY UPDATE: denial of service and possible code execution via
  malformed ResolutionUnit or IOP tags.
  - debian/patches/CVE-2012-0247.patch: properly calculate
    lengths and sizes in magick/{profile,property}.c.
  - CVE-2012-0247
  - CVE-2012-0248
  - CVE-2012-1185
  - CVE-2012-1186
* SECURITY UPDATE: denial of service and possible code execution via
  EXIF tags.
  - debian/patches/CVE-2012-0259.patch: don't copy invalid memory in
    coders/tiff.c, properly initialize buffers in magick/property.c.
  - CVE-2012-0259
  - CVE-2012-1798
* SECURITY UPDATE: denial of service and possible code execution via
  JPEG EXIF integer overflow.
  - debian/patches/CVE-2012-1610.patch: check number of bytes in
    magick/{profile,property}.c.
  - CVE-2012-1610

33. By Scott Howard on 2012-02-17

0006-rsvg-convert.patch: upstream removed the rsvg command from
librsvg2-bin, use rsvg-convert instead (LP: #929573)

32. By Michael Terry on 2011-11-29

* debian/rules:
  - Build PerlMagick Makefile after building main library, so that
    MakeMaker can find the library instead of stripping it from the
    link line. LP: #897380

31. By Michael Terry on 2011-11-17

* Merge from Debian testing. Remaining changes:
  - Make ufraw-batch (universe) a suggestion instead of a recommendation.
  - Don't set MAKEFLAGS in debian/rules; just pass it to the build.

30. By Colin Watson on 2011-11-16

Rebuild for Perl 5.14.

29. By Colin Watson on 2011-06-15

* Resynchronise with Debian (LP: #797595). Remaining changes:
  - Make ufraw-batch (universe) a suggestion instead of a recommendation.
  - Make debian/rules install target depend on check; they cannot reliably
    be run in parallel.
  - Don't set MAKEFLAGS in debian/rules; just pass it to the build.

28. By Colin Watson on 2011-05-10

Rebuild for Perl 5.12.

27. By Matthias Klose on 2011-03-16

Don't set MAKEFLAGS in debian/rules. just pass it to the build.