imagemagick 8:6.9.7.4+dfsg-13ubuntu1 source package in Ubuntu
Changelog
imagemagick (8:6.9.7.4+dfsg-13ubuntu1) artful; urgency=low * Merge from Debian unstable. Remaining changes: - Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000 but is not in main. - demote libmagickcore-6.q16hdri-3-extra and libmagickcore-6.q16-3-extra Recommends on libjxr-tools to Suggests, as it is in universe. imagemagick (8:6.9.7.4+dfsg-13) unstable; urgency=high * Fix a typo in changelog about CVE numbers * Security fixes: + Really Fix CVE-2017-9500 (Closes: #867778) An assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file. + Fix CVE-2017-11446 (Closes: #868950) The ReadPESImage function in coders\pes.c has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file. + CVE-2017-11523: endless loop in ReadTXTImage If text image file only contains "MagickID..." line, it will cause ReadTXTImage to infinite loop. (Closes: #869210). + Use after free in ReadWMFImage When identify WMF file, a crafted file revealed a use-after-free vulnerability. (Closes: #869715). + CVE-2017-11534: Memory-Leak in lite_font_map() In coders/wmf.c a memory leak is triggered by a crafted file. (Closes: #869711). + CVE-2017-11537: palm coder FPE When ImageMagick processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation. (Closes: #869712) + Memory leak in WritePALMImage Fix memory leak due to crafted file in palm coder. (Closes: #869721) + Fix another memory leak in quantize.c (Closes: #869722) + CVE-2017-11531 Memory-Leak in WriteHISTOGRAMImage() A crafted file could trigger a Memory-Leak in WriteHISTOGRAMImage() coders/histogram.c (Closes: #869725) + Avoid a crash in mpc coder A crafted file could trigger a crash in the mpc coder. (Closes: #869728). + Fix a memory leak in enhance.c Fix a potential memory leak if memory could not be allocated for one of histogram or stretch_map. If both cannot be allocated, there is no memory leak. If only one is allocated and the other fails, there is a memory leak of the one that could not be allocated. There is very little chance the allocations would fail. (Closes: #869769). + Fix a memory leak in jpeg and mpc coder A leak due to exception handling exist in MPC and JPEG coder. This could be triggerd by a crafted file. (Closes: #869791). + Fix memory exhaustion in mpc coder When identify MPC file , imagemagick will allocate memory to store the data. The function StringToUnsignedLong convert string to unsigned long type, but the return value was not checked. Here is my policy.xml to limit memory usage,but 256MB limit can be bypassed. (Closes: #869727). + Fix a leak in mpc file due to corrupted profiles (Closes: #869796). + CVE-2017-11532: memory leak When Imagemagick processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c. (Closes: #869726) + CVE-2017-11535: heap based overflow in ps.c When ImageMagick processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. (Closes: #869827) + CVE-2017-11536 memory leak in jp2 coder When ImageMagick processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c. (Closes: #869831) + Fix a crash in jp2 codec Lack of validation of jp2 could lead to a crash (Closes: #869830) + CVE-2017-11533: heap buffer overflow in uil coder When ImageMagick processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c. (Closes: #869834) -- Gianfranco Costamagna <email address hidden> Fri, 28 Jul 2017 10:51:57 +0200
Upload details
- Uploaded by:
- Gianfranco Costamagna
- Uploaded to:
- Artful
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- graphics
- Urgency:
- Very Urgent
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
imagemagick_6.9.7.4+dfsg.orig.tar.xz | 8.5 MiB | 47fb2cdd26f5913318c4504f16ea363e04d1f400dda9ec52e461ab661d724026 |
imagemagick_6.9.7.4+dfsg-13ubuntu1.debian.tar.xz | 239.9 KiB | 7841629ac3e99f0ef7f1d86860a0a98445ccd65fa488cc0deae8ddfe389c6399 |
imagemagick_6.9.7.4+dfsg-13ubuntu1.dsc | 5.1 KiB | 5d940fd2cd84ee80beac816fde76aabcd35e0270799f68cb7c1caa08ef7edeb5 |
Available diffs
Binary packages built by this source
- imagemagick: No summary available for imagemagick in ubuntu artful.
No description available for imagemagick in ubuntu artful.
- imagemagick-6-common: No summary available for imagemagick-6-common in ubuntu artful.
No description available for imagemagick-
6-common in ubuntu artful.
- imagemagick-6-doc: No summary available for imagemagick-6-doc in ubuntu artful.
No description available for imagemagick-6-doc in ubuntu artful.
- imagemagick-6.q16: No summary available for imagemagick-6.q16 in ubuntu artful.
No description available for imagemagick-6.q16 in ubuntu artful.
- imagemagick-6.q16-dbgsym: No summary available for imagemagick-6.q16-dbgsym in ubuntu artful.
No description available for imagemagick-
6.q16-dbgsym in ubuntu artful.
- imagemagick-6.q16hdri: No summary available for imagemagick-6.q16hdri in ubuntu artful.
No description available for imagemagick-
6.q16hdri in ubuntu artful.
- imagemagick-6.q16hdri-dbgsym: No summary available for imagemagick-6.q16hdri-dbgsym in ubuntu artful.
No description available for imagemagick-
6.q16hdri- dbgsym in ubuntu artful.
- imagemagick-common: No summary available for imagemagick-common in ubuntu artful.
No description available for imagemagick-common in ubuntu artful.
- imagemagick-doc: No summary available for imagemagick-doc in ubuntu artful.
No description available for imagemagick-doc in ubuntu artful.
- libimage-magick-perl: No summary available for libimage-magick-perl in ubuntu artful.
No description available for libimage-
magick- perl in ubuntu artful.
- libimage-magick-q16-perl: No summary available for libimage-magick-q16-perl in ubuntu artful.
No description available for libimage-
magick- q16-perl in ubuntu artful.
- libimage-magick-q16-perl-dbgsym: No summary available for libimage-magick-q16-perl-dbgsym in ubuntu artful.
No description available for libimage-
magick- q16-perl- dbgsym in ubuntu artful.
- libimage-magick-q16hdri-perl: No summary available for libimage-magick-q16hdri-perl in ubuntu artful.
No description available for libimage-
magick- q16hdri- perl in ubuntu artful.
- libimage-magick-q16hdri-perl-dbgsym: No summary available for libimage-magick-q16hdri-perl-dbgsym in ubuntu artful.
No description available for libimage-
magick- q16hdri- perl-dbgsym in ubuntu artful.
- libmagick++-6-headers: No summary available for libmagick++-6-headers in ubuntu artful.
No description available for libmagick+
+-6-headers in ubuntu artful.
- libmagick++-6.q16-7: No summary available for libmagick++-6.q16-7 in ubuntu artful.
No description available for libmagick++-6.q16-7 in ubuntu artful.
- libmagick++-6.q16-7-dbgsym: No summary available for libmagick++-6.q16-7-dbgsym in ubuntu artful.
No description available for libmagick+
+-6.q16- 7-dbgsym in ubuntu artful.
- libmagick++-6.q16-dev: No summary available for libmagick++-6.q16-dev in ubuntu artful.
No description available for libmagick+
+-6.q16- dev in ubuntu artful.
- libmagick++-6.q16hdri-7: No summary available for libmagick++-6.q16hdri-7 in ubuntu artful.
No description available for libmagick+
+-6.q16hdri- 7 in ubuntu artful.
- libmagick++-6.q16hdri-7-dbgsym: No summary available for libmagick++-6.q16hdri-7-dbgsym in ubuntu artful.
No description available for libmagick+
+-6.q16hdri- 7-dbgsym in ubuntu artful.
- libmagick++-6.q16hdri-dev: No summary available for libmagick++-6.q16hdri-dev in ubuntu artful.
No description available for libmagick+
+-6.q16hdri- dev in ubuntu artful.
- libmagick++-dev: No summary available for libmagick++-dev in ubuntu artful.
No description available for libmagick++-dev in ubuntu artful.
- libmagickcore-6-arch-config: No summary available for libmagickcore-6-arch-config in ubuntu artful.
No description available for libmagickcore-
6-arch- config in ubuntu artful.
- libmagickcore-6-headers: No summary available for libmagickcore-6-headers in ubuntu artful.
No description available for libmagickcore-
6-headers in ubuntu artful.
- libmagickcore-6.q16-3: No summary available for libmagickcore-6.q16-3 in ubuntu artful.
No description available for libmagickcore-
6.q16-3 in ubuntu artful.
- libmagickcore-6.q16-3-dbgsym: No summary available for libmagickcore-6.q16-3-dbgsym in ubuntu artful.
No description available for libmagickcore-
6.q16-3- dbgsym in ubuntu artful.
- libmagickcore-6.q16-3-extra: No summary available for libmagickcore-6.q16-3-extra in ubuntu artful.
No description available for libmagickcore-
6.q16-3- extra in ubuntu artful.
- libmagickcore-6.q16-3-extra-dbgsym: No summary available for libmagickcore-6.q16-3-extra-dbgsym in ubuntu artful.
No description available for libmagickcore-
6.q16-3- extra-dbgsym in ubuntu artful.
- libmagickcore-6.q16-dev: No summary available for libmagickcore-6.q16-dev in ubuntu artful.
No description available for libmagickcore-
6.q16-dev in ubuntu artful.
- libmagickcore-6.q16hdri-3: No summary available for libmagickcore-6.q16hdri-3 in ubuntu artful.
No description available for libmagickcore-
6.q16hdri- 3 in ubuntu artful.
- libmagickcore-6.q16hdri-3-dbgsym: No summary available for libmagickcore-6.q16hdri-3-dbgsym in ubuntu artful.
No description available for libmagickcore-
6.q16hdri- 3-dbgsym in ubuntu artful.
- libmagickcore-6.q16hdri-3-extra: No summary available for libmagickcore-6.q16hdri-3-extra in ubuntu artful.
No description available for libmagickcore-
6.q16hdri- 3-extra in ubuntu artful.
- libmagickcore-6.q16hdri-3-extra-dbgsym: No summary available for libmagickcore-6.q16hdri-3-extra-dbgsym in ubuntu artful.
No description available for libmagickcore-
6.q16hdri- 3-extra- dbgsym in ubuntu artful.
- libmagickcore-6.q16hdri-dev: No summary available for libmagickcore-6.q16hdri-dev in ubuntu artful.
No description available for libmagickcore-
6.q16hdri- dev in ubuntu artful.
- libmagickcore-dev: No summary available for libmagickcore-dev in ubuntu artful.
No description available for libmagickcore-dev in ubuntu artful.
- libmagickwand-6-headers: No summary available for libmagickwand-6-headers in ubuntu artful.
No description available for libmagickwand-
6-headers in ubuntu artful.
- libmagickwand-6.q16-3: No summary available for libmagickwand-6.q16-3 in ubuntu artful.
No description available for libmagickwand-
6.q16-3 in ubuntu artful.
- libmagickwand-6.q16-3-dbgsym: No summary available for libmagickwand-6.q16-3-dbgsym in ubuntu artful.
No description available for libmagickwand-
6.q16-3- dbgsym in ubuntu artful.
- libmagickwand-6.q16-dev: No summary available for libmagickwand-6.q16-dev in ubuntu artful.
No description available for libmagickwand-
6.q16-dev in ubuntu artful.
- libmagickwand-6.q16hdri-3: No summary available for libmagickwand-6.q16hdri-3 in ubuntu artful.
No description available for libmagickwand-
6.q16hdri- 3 in ubuntu artful.
- libmagickwand-6.q16hdri-3-dbgsym: No summary available for libmagickwand-6.q16hdri-3-dbgsym in ubuntu artful.
No description available for libmagickwand-
6.q16hdri- 3-dbgsym in ubuntu artful.
- libmagickwand-6.q16hdri-dev: No summary available for libmagickwand-6.q16hdri-dev in ubuntu artful.
No description available for libmagickwand-
6.q16hdri- dev in ubuntu artful.
- libmagickwand-dev: No summary available for libmagickwand-dev in ubuntu artful.
No description available for libmagickwand-dev in ubuntu artful.
- perlmagick: No summary available for perlmagick in ubuntu artful.
No description available for perlmagick in ubuntu artful.