LWN.net Logo

Fedora alert FEDORA-2012-12352 (GraphicsMagick)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 17 Update: GraphicsMagick-1.3.16-5.fc17
Date:  Fri, 07 Sep 2012 11:34:45 +0000
Message-ID:  <20120907113447.EAA6920AEB@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-12352 2012-08-21 09:28:16 -------------------------------------------------------------------------------- Name : GraphicsMagick Product : Fedora 17 Version : 1.3.16 Release : 5.fc17 URL : http://www.graphicsmagick.org/ Summary : An ImageMagick fork, offering faster image generation and better quality Description : GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. -------------------------------------------------------------------------------- Update Information: This update: * addresses a potential memory allocation issue with png images * fixes a -devel multilib conflict * builds against lcms2 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 20 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.16-5 - CVE-2012-3438 GraphicsMagick: png_IM_malloc() size argument (#844106, #844107) * Mon Aug 20 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.16-4 - link GraphicsMagick against lcms2 instead of lcms1 (#849778) * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Jun 27 2012 Petr Pisar <ppisar@redhat.com> - 1.3.16-2 - Perl 5.16 rebuild * Sun Jun 24 2012 Rex Dieter <rdieter@fedoraproject.org> - 1.3.16-1 - GraphicsMagick-1.3.16 - GraphicsMagick-devel and GraphicsMagick-c++-devel multilib conflict (#566361) * Mon Jun 11 2012 Petr Pisar <ppisar@redhat.com> - 1.3.15-3 - Perl 5.16 rebuild * Tue May 8 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.15-2 - rebuild (libtiff) * Sat Apr 28 2012 Rex Dieter <rdieter@fedoraproject.org> 1.3.15-1 - 1.3.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #566361 - GraphicsMagick-devel and GraphicsMagick-c++-devel multilib conflict https://bugzilla.redhat.com/show_bug.cgi?id=566361 [ 2 ] Bug #844106 - CVE-2012-3438 GraphicsMagick: png_IM_malloc() size argument [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=844106 [ 3 ] Bug #849778 - link GraphicsMagick against lcms2 instead of lcms1 https://bugzilla.redhat.com/show_bug.cgi?id=849778 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update GraphicsMagick' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds