LWN.net Logo

Fedora alert FEDORA-2012-12366 (GraphicsMagick)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 16 Update: GraphicsMagick-1.3.16-5.fc16
Date:  Fri, 07 Sep 2012 11:31:15 +0000
Message-ID:  <20120907113117.BFF4F20956@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-12366 2012-08-21 09:29:23 -------------------------------------------------------------------------------- Name : GraphicsMagick Product : Fedora 16 Version : 1.3.16 Release : 5.fc16 URL : http://www.graphicsmagick.org/ Summary : An ImageMagick fork, offering faster image generation and better quality Description : GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. -------------------------------------------------------------------------------- Update Information: This update: * addresses a potential memory allocation issue with png images * fixes a -devel multilib conflict * builds against lcms2 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.16-5 - CVE-2012-3438 GraphicsMagick: png_IM_malloc() size argument (#844106, #844107) * Mon Aug 20 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.16-4 - link GraphicsMagick against lcms2 instead of lcms1 (#849778) * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Jun 27 2012 Petr Pisar <ppisar@redhat.com> - 1.3.16-2 - Perl 5.16 rebuild * Sun Jun 24 2012 Rex Dieter <rdieter@fedoraproject.org> - 1.3.16-1 - GraphicsMagick-1.3.16 - GraphicsMagick-devel and GraphicsMagick-c++-devel multilib conflict (#566361) * Mon Jun 11 2012 Petr Pisar <ppisar@redhat.com> - 1.3.15-3 - Perl 5.16 rebuild * Tue May 8 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.15-2 - rebuild (libtiff) * Sat Apr 28 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.15-1 - 1.3.15 * Sun Feb 26 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.14-1 - 1.3.14 * Mon Jan 23 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.13-4 - -devel: omit seemingly extraneous dependencies * Mon Jan 23 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.13-3 - BR: perl(ExtUtils::MakeMaker) * Mon Jan 23 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.13-2 - Bad font configuration (#783906) - re-introduce perl_linkage patch, fixes %check * Thu Jan 12 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.13-1 - 1.3.13 * Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.12-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 6 2011 Adam Jackson <ajax@redhat.com> - 1.3.12-7 - Rebuild for new libpng -------------------------------------------------------------------------------- References: [ 1 ] Bug #566361 - GraphicsMagick-devel and GraphicsMagick-c++-devel multilib conflict https://bugzilla.redhat.com/show_bug.cgi?id=566361 [ 2 ] Bug #844106 - CVE-2012-3438 GraphicsMagick: png_IM_malloc() size argument [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=844106 [ 3 ] Bug #849778 - link GraphicsMagick against lcms2 instead of lcms1 https://bugzilla.redhat.com/show_bug.cgi?id=849778 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update GraphicsMagick' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds