Bug#683284: CVE-2012-3438

2012-08-21 Thread Jonathan Wiltshire
Package: graphicsmagick Dear maintainer, Recently you fixed one or more security problems and as a result you closed this bug. These problems were not serious enough for a Debian Security Advisory, so they are now on my radar for fixing in the following suites through point releases: squeeze

Bug#683284: CVE-2012-3438

2012-07-30 Thread Moritz Muehlenhoff
Package: graphicsmagick Severity: grave Tags: security Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3438 for details. Please fix this for Wheezy with an isolated fix instead of updating to a new upstream release (since the freeze is in effect) This doesn't warrant a DSA, but

Bug#683284: CVE-2012-3438

2012-07-30 Thread Bob Friesenhahn
The fix is in the GraphicsMagick Mercurial repository as changeset d6e469d02cd2: http://graphicsmagick.hg.sourceforge.net/hgweb/graphicsmagick/graphicsmagick/rev/d6e469d02cd2 Bob On Mon, 30 Jul 2012, Moritz Muehlenhoff wrote: Package: graphicsmagick Severity: grave Tags: security Please