imagemagick 8:6.9.6.2+dfsg-2ubuntu1 source package in Ubuntu

Changelog

imagemagick (8:6.9.6.2+dfsg-2ubuntu1) zesty; urgency=medium

  * Merge with Debian unstable (LP: #1645406). Remaining changes:
    - Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000
      but is not in main (LP #711061).
      [ Previously undocumented ]
  * Drop:
    - Add backports of d6054824, 95c8394e and 68c6a7d to
      0070-Fix-PixelColor-off-by-one-on-i386.patch (LP #1549942)
      which were missed in "PixelColor off by one on i386
      (closes #811308)
      https://github.com/ImageMagick/ImageMagick/issues/54".
      + Add backport of 54b752c3 to fix color behavior (LP #1549942).
      + Fix backport of d6054824 to include dropped parentheses
      (LP #1549942).
      + Drop of backported fixes to d/p/0070-Fix-PixelColor-off-by-one-on-i386.patch
        [ Previously undocumented ]
      [ Fixed upstream ]
    - debian/rules: Use LCQUANTUMDEPTH when generating display-im6.desktop too.
      Fixes broken icon in .desktop file. (LP #1558409)
      [ Fixed in Debian ]
    - SECURITY UPDATE: popen() shell vulnerability
      + d/p/0082-Disable-MAGICKCORE_HAVE_POPEN.patch
      + CVE-2016-5118
      [ Fixed upstream, thanks to Marc Deslauriers
        <email address hidden> for verification. ]
    - SECURITY UPDATE: ImageTragick remote code execution
      + d/p/0076-Disable-EPHEMERAL-URL-HTTPS-MVG-MSL-TEXT-SHOW-WIN-and-PLT-coders.patch
      + d/p/0077-Remove-PLT-Gnuplot-decoder.patch
      + d/p/0078-Sanitize-input-filename-for-http-and-https-delegates.patch
      + d/p/0079-Indirect-filename-must-be-authorized-by-policy.patch
      + d/p/0080-Prevent-indirect-reads-with-label-at.patch
      + d/p/0081-Less-secure-coders-require-explicit-reference.patch
      + debian/rules: build with --with-rsvg.
      + CVE-2016-3714
      + CVE-2016-3716
      + CVE-2016-3718
      [ Fixed upstream, thanks to Marc Deslauriers
        <email address hidden> for verification. ]
    - debian/README.Debian: explain use of --with-rsvg option.
      [ Previously undocumented, dropped ]
    - SECURITY UPDATE: multiple security issues
      + debian/patches/*: synchronize large quantity of security fixes with
        Debian's 8:6.8.9.9-5+deb8u5 release. Thanks to Bastien Roucariès for
        the excellent work this update is based on!
      + CVE-2014-9907, CVE-2015-8957, CVE-2015-8958, CVE-2015-8959,
        CVE-2016-4562, CVE-2016-4563, CVE-2016-4564, CVE-2016-5010,
        CVE-2016-5687, CVE-2016-5688, CVE-2016-5689, CVE-2016-5690,
        CVE-2016-5691, CVE-2016-5841, CVE-2016-5842, CVE-2016-6491,
        CVE-2016-6823, CVE-2016-7101, CVE-2016-7513, CVE-2016-7514,
        CVE-2016-7515, CVE-2016-7516, CVE-2016-7517, CVE-2016-7518,
        CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, CVE-2016-7522,
        CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526,
        CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530,
        CVE-2016-7531, CVE-2016-7532, CVE-2016-7533, CVE-2016-7534,
        CVE-2016-7535, CVE-2016-7536, CVE-2016-7537, CVE-2016-7538,
        CVE-2016-7539, CVE-2016-7540
      [ Fixed upstream, thanks to Marc Deslauriers
        <email address hidden> for verification. ]
    - Add backport of a54fe0e8 to fix segmentation faults during
      php-imagick tests (LP #1549942).
      + Delete d/p/0076-Fix-segmentation-fault-with-php-imagick.patch
        [ previously undocumented ]
      [ Fixed upstream ]

 -- Nishanth Aravamudan <email address hidden>  Wed, 23 Nov 2016 13:18:57 -0800