Mageia alert MGASA-2012-0192 (graphicsmagick)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0192: graphicsmagick-1.3.12-3.2.mga1
 (1/core), graphicsmagick-1.3.13-1.4.mga2 (2/core) 
Date:
    	     
 
Thu, 2 Aug 2012 22:09:38 +0200
Message-ID:
    	     
 
<20120802200937.GA26370@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0192
Date: 	August 2nd, 2012
Affected releases: 	1, 2


Description:
Updated graphicsmagick packages fix security vulnerability:

This update fixes a security issue in the SetImageAttribute function in
magick/attribute.c related to translating comment and label attributes
when loading images. It was fixed upstream in GraphicsMagick 1.3.16.

Also, the graphicsmagick perl module was not working on Mageia 2 because
it had not been linked against the graphicsmagick library. This has been
fixed.


Updated Packages:
Mageia 1:
graphicsmagick-1.3.12-3.2.mga1
graphicsmagick-doc-1.3.12-3.2.mga1
lib(64)graphicsmagick3-1.3.12-3.2.mga1
lib(64)graphicsmagickwand2-1.3.12-3.2.mga1
lib(64)graphicsmagick-devel-1.3.12-3.2.mga1
perl-Graphics-Magick-1.3.12-3.2.mga1

Mageia 2:
graphicsmagick-1.3.13-1.4.mga2
graphicsmagick-doc-1.3.13-1.4.mga2
lib(64)graphicsmagick3-1.3.13-1.4.mga2
lib(64)graphicsmagickwand2-1.3.13-1.4.mga2
lib(64)graphicsmagick-devel-1.3.13-1.4.mga2
perl-Graphics-Magick-1.3.13-1.4.mga2


References:
http://www.graphicsmagick.org/NEWS.html#june-24-2012
https://bugs.mageia.org/show_bug.cgi?id=6561
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...