lp://staging/ubuntu/raring-security/imagemagick

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

41. By Marc Deslauriers on 2013-09-09

* SECURITY UPDATE: denial of service and possible code execution in GIF
  image comment decoding (LP: #1218248)
  - debian/patches/CVE-2013-4298.patch: properly handle comments in
    coders/gif.c.
  - CVE-2013-4298

40. By Philip Muškovac on 2013-02-24

libmagickcore-dev should depend on liblcms2-dev not liblcms-dev
(LP: #1132506)

39. By Micah Gersten on 2013-01-22

* Merge from Debian unstable. (LP: #1079209) Remaining changes:
  - Make ufraw-batch (universe) a suggestion instead of a recommendation.
  - Don't set MAKEFLAGS in debian/rules; just pass it to the build.
  - Build-Depend on libtiff5-dev instead of libtiff-dev
  - Depend on fftw3-dev as it's in main, not fftw-dev.
  - Don't build depend on graphicsmagick-imagemagick-compat (universe)
  - Don't use graphicmagick's convert executable just to convert our
    svg into a menu xpm. Instead, run the convert we build.
* Mark Vcs-* as XS-Debian-Vcs-*
  - update debian/control

38. By Jamie Strandboge on 2012-08-17

* SECURITY UPDATE: denial of service via large resource consumption
  - debian/patches/CVE-2012-3437.patch: always use correct size argument
    with libpng memory allocation
  - CVE-2012-3437

37. By Michael Terry on 2012-07-10

* debian/control, debian/rules:
  - Don't use graphicmagick's convert executable just to convert our
    svg into a menu xpm. Instead, run the convert we build.

36. By Michael Terry on 2012-07-10

* debian/control:
  - Depend on fftw3-dev, not fftw-dev. fftw-dev is very old and not in
    main, like fftw3-dev is. Plus, imagemagick doesn't even check for
    fftw2, it only can use fftw3.

35. By Michael Terry on 2012-07-10

* Merge from Debian unstable. Remaining changes:
  - Make ufraw-batch (universe) a suggestion instead of a recommendation.
  - Don't set MAKEFLAGS in debian/rules; just pass it to the build.
* debian/control:
  - Build-Depend on libtiff5-dev instead of libtiff-dev

34. By Marc Deslauriers on 2012-04-25

* SECURITY UPDATE: denial of service and possible code execution via
  malformed ResolutionUnit or IOP tags.
  - debian/patches/CVE-2012-0247.patch: properly calculate
    lengths and sizes in magick/{profile,property}.c.
  - CVE-2012-0247
  - CVE-2012-0248
  - CVE-2012-1185
  - CVE-2012-1186
* SECURITY UPDATE: denial of service and possible code execution via
  EXIF tags.
  - debian/patches/CVE-2012-0259.patch: don't copy invalid memory in
    coders/tiff.c, properly initialize buffers in magick/property.c.
  - CVE-2012-0259
  - CVE-2012-1798
* SECURITY UPDATE: denial of service and possible code execution via
  JPEG EXIF integer overflow.
  - debian/patches/CVE-2012-1610.patch: check number of bytes in
    magick/{profile,property}.c.
  - CVE-2012-1610

33. By Scott Howard on 2012-02-17

0006-rsvg-convert.patch: upstream removed the rsvg command from
librsvg2-bin, use rsvg-convert instead (LP: #929573)

32. By Michael Terry on 2011-11-29

* debian/rules:
  - Build PerlMagick Makefile after building main library, so that
    MakeMaker can find the library instead of stripping it from the
    link line. LP: #897380