[Pkg-gmagick-im-team] Bug#845206: Bug#845206: CVE-2016-8677: memory allocate failure in AcquireQuantumPixels

[Bastien ROUCARIES]

control: notfound -1 8:6.9.6.2+dfsg-1

On Mon, Nov 21, 2016 at 2:19 PM, Salvatore Bonaccorso <carnil at debian.org> wrote:
> Hi,
>
> On Mon, Nov 21, 2016 at 01:51:52PM +0100, Bastien ROUCARIES wrote:
>> Package: src:imagemagick
>> version: 8:6.9.6.2+dfsg-2
>> Severity: important
>> Tags: patch security
>> X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org
>> control: found -1 8:6.7.7.10-5+deb7u7
>> control: found -1 8:6.8.9.9-5+deb8u5
>> control: tags -1 + fixed-upstream
>>
>>
>> https://blogs.gentoo.org/ago/2016/10/07/imagemagick-memory-allocate-failure-in-acquirequantumpixels-quantum-c/
>> Fixed by: https://github.com/ImageMagick/ImageMagick/commit/6e48aa92ff4e6e95424300ecd52a9ea453c19c60
>
> Isn't this fixed already in 8:6.9.6.2+dfsg-1? What do I miss?
>
> Regards,
> Salvatore
>
> _______________________________________________
> Pkg-gmagick-im-team mailing list
> Pkg-gmagick-im-team at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-gmagick-im-team