All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH] imagemagick: security bump to 7.0.2-9
@ 2016-08-26 12:51 Peter Korsgaard
  2016-08-26 13:37 ` Thomas Petazzoni
  0 siblings, 1 reply; 2+ messages in thread
From: Peter Korsgaard @ 2016-08-26 12:51 UTC (permalink / raw)
  To: buildroot

Fixes a number of buffer overflows / use-after-free issues:
http://git.imagemagick.org/repos/ImageMagick/blob/master/ChangeLog

  * Prevent buffer overflow in BMP & SGI coders (bug report from
    pwchen&rayzhong of tencent).
  * Prevent buffer overflow and other problems in SIXEL, PDB, MAP, TIFF and
    CALS coders (bug report from Donghai Zhu).
  * Prevent buffer overflow (bug report from Max Thrane).
  * Prevent memory use after free (reference
    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245).

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/imagemagick/imagemagick.hash | 2 +-
 package/imagemagick/imagemagick.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/imagemagick/imagemagick.hash b/package/imagemagick/imagemagick.hash
index 71cfeda..dcbef18 100644
--- a/package/imagemagick/imagemagick.hash
+++ b/package/imagemagick/imagemagick.hash
@@ -1,2 +1,2 @@
 # From http://www.imagemagick.org/download/releases/digest.rdf
-sha256 1e173314ddcf1508f9f4c20ddd650883e089dea6acbedd8f2c54d02109104cf9 ImageMagick-7.0.2-6.tar.xz
+sha256 22df4f197985f36f77b7b0d44de92ff44415885045f0191b3319540bdc82ff53 ImageMagick-7.0.2-9.tar.xz
diff --git a/package/imagemagick/imagemagick.mk b/package/imagemagick/imagemagick.mk
index 2d2fe76..373765c 100644
--- a/package/imagemagick/imagemagick.mk
+++ b/package/imagemagick/imagemagick.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-IMAGEMAGICK_VERSION = 7.0.2-6
+IMAGEMAGICK_VERSION = 7.0.2-9
 IMAGEMAGICK_SOURCE = ImageMagick-$(IMAGEMAGICK_VERSION).tar.xz
 IMAGEMAGICK_SITE = http://www.imagemagick.org/download/releases
 IMAGEMAGICK_LICENSE = Apache-2.0
-- 
2.8.1

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [Buildroot] [PATCH] imagemagick: security bump to 7.0.2-9
  2016-08-26 12:51 [Buildroot] [PATCH] imagemagick: security bump to 7.0.2-9 Peter Korsgaard
@ 2016-08-26 13:37 ` Thomas Petazzoni
  0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni @ 2016-08-26 13:37 UTC (permalink / raw)
  To: buildroot

Hello,

On Fri, 26 Aug 2016 14:51:35 +0200, Peter Korsgaard wrote:
> Fixes a number of buffer overflows / use-after-free issues:
> http://git.imagemagick.org/repos/ImageMagick/blob/master/ChangeLog
> 
>   * Prevent buffer overflow in BMP & SGI coders (bug report from
>     pwchen&rayzhong of tencent).
>   * Prevent buffer overflow and other problems in SIXEL, PDB, MAP, TIFF and
>     CALS coders (bug report from Donghai Zhu).
>   * Prevent buffer overflow (bug report from Max Thrane).
>   * Prevent memory use after free (reference
>     https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245).
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> ---
>  package/imagemagick/imagemagick.hash | 2 +-
>  package/imagemagick/imagemagick.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2016-08-26 13:37 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-08-26 12:51 [Buildroot] [PATCH] imagemagick: security bump to 7.0.2-9 Peter Korsgaard
2016-08-26 13:37 ` Thomas Petazzoni

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.