Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | imagemagick: bump version to 7.0.5-5 | Vicente Olivert Riera | 2017-05-09 | 1 | -52/+0 |
| | | | | | | | | 0001 patch already included in this release: https://github.com/ImageMagick/ImageMagick/commit/b218117cad34d39b9ffb587b45c71c5a49b12bde Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> | ||||
* | imagemagick: add upstream security fix for CVE-2017-7606 | Peter Korsgaard | 2017-04-26 | 1 | -0/+52 |
This is not yet part of any release. coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. For more details, see: https://blogs.gentoo.org/ago/2017/04/02/imagemagick-undefined-behavior-in-codersrle-c/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |