Ubuntu
imagemagick package

Change logs for imagemagick source package in Groovy

  1. Groovy (20.10)
  2. Change log 
  • imagemagick (8:6.9.10.23+dfsg-2.1ubuntu13.3) groovy-security; urgency=medium

  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2020-19667, CVE-2020-25665, CVE-2020-25666, CVE-2020-25674,
      CVE-2020-25675, CVE-2020-25676, CVE-2020-27750, CVE-2020-27751,
      CVE-2020-27753, CVE-2020-27754, CVE-2020-27755, CVE-2020-27756,
      CVE-2020-27757, CVE-2020-27758, CVE-2020-27759, CVE-2020-27754,
      CVE-2020-27760, CVE-2020-27761, CVE-2020-27762, CVE-2020-27763,
      CVE-2020-27764, CVE-2020-27765, CVE-2020-27766, CVE-2020-27767,
      CVE-2020-27768, CVE-2020-27769, CVE-2020-27770, CVE-2020-27771,
      CVE-2020-27772, CVE-2020-27773, CVE-2020-27774, CVE-2020-27775,
      CVE-2020-27776, CVE-2021-20176

 -- Marc Deslauriers <email address hidden>  Thu, 10 Jun 2021 07:52:45 -0400
  • imagemagick (8:6.9.10.23+dfsg-2.1ubuntu13.1) groovy-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2019-19948.patch: Fix heap-based buffer overflow in
      coders/sgi.c.
    - debian/patches/CVE-2019-19949.patch: Fix heap-based buffer overflow in
      coders/png.c.
    - CVE-2019-19948
    - CVE-2019-19949
  * SECURITY UPDATE: division by zero
    - debian/patches/CVE-2020-27560.patch: Change division to multiplication in
      OptimizeLayerFrames in magick/layer.c
    - CVE-2020-27560

 -- Avital Ostromich <email address hidden>  Wed, 18 Nov 2020 08:54:07 -0500
  • imagemagick (8:6.9.10.23+dfsg-2.1ubuntu13) groovy; urgency=medium

  * Rebuild against new libopenexr25.

 -- Gianfranco Costamagna <email address hidden>  Sat, 05 Sep 2020 17:12:34 +0200
  • imagemagick (8:6.9.10.23+dfsg-2.1ubuntu12) groovy; urgency=medium

  * Build depend on libopenjp2-7-dev as that is in main. (LP: #1447968)

 -- Brian Murray <email address hidden>  Fri, 22 May 2020 15:43:14 -0700
  • imagemagick (8:6.9.10.23+dfsg-2.1ubuntu11) focal; urgency=medium

  * No-change rebuild for libgcc-s1 package name change.

 -- Matthias Klose <email address hidden>  Tue, 24 Mar 2020 15:05:04 +0100