imagemagick 7:6.2.4.5.dfsg1-2ubuntu1 source package in Ubuntu

Changelog

imagemagick (7:6.2.4.5.dfsg1-2ubuntu1) gutsy; urgency=low

  * Merge with Debian unstable for CVE fixes.  Remaining changes:
    - Magick++/lib/Geometry.cpp: build fix for g++-4.3.
    - debian/control: Ubuntu maintainer address.

imagemagick (7:6.2.4.5.dfsg1-2) unstable; urgency=high

  * Fix multiple vulnerabilities in imagemagick. Closes: #444267
    + magick/memory.c,magick/memory_.h,magick/methods.h: Add new allocator
      wrapper AcquireQuantumMemory() to prevent potential integer overflows.
      Backport from upstream version 6.3.5.9.
    + magick/image.c: Backport new implementation of SetImageExtent() from
      upstream version 6.3.5.9.
    + coders/dcm.c,coders/xcf.c: Fix integer overflow in DCM and XCF coders.
      (CVE-2007-4985) Backport of upstream patch from version 6.3.5.9.
    + coders/dcm.c,coders/dib.c,coders/xbm.c,coders/xcf.c,coders/xwd.c:
      Fix multiple integer overflows in DCM, DIB, XBM, XCF, and XWD coders.
      (CVE-2007-4986 and CVE-2007-4988) Based on upstream patch from
      version 6.3.5.9.
    + magick/blob.c: Fix fencepost error in ReadBlobString()
      (CVE-2007-4987) Backport of upstream patch from version 6.3.5.9.
    + coders/dib.c: Ensure positive value for image rows and columns.
      Based on upstream patch from version 6.3.5.9.
    + All of the above patches have been derived from backports supplied by
      Jonathan Smith.

 -- Kees Cook <email address hidden>   Tue, 02 Oct 2007 14:15:13 -0700