Your message dated Thu, 01 Nov 2018 19:56:11 +0000
with message-id <[email protected]>
and subject line Bug#911386: fixed in graphicsmagick 1.3.30+hg15796-1~deb9u2
has caused the Debian Bug report #911386,
regarding libgraphicsmagick-q16-3: graphicsmagick 1.3.30 has made formats 
case-sensitive at the API level
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
911386: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911386
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libgraphicsmagick-q16-3
Version: 1.3.30+hg15796-1~deb9u1
Severity: important

Somewhere in between GraphicsMagick 1.3.28 and 1.3.30, there was an
internal API change which introduced case sensitivity into magick formats.
Command-line tools seem to work, as do perl API's, but low-level
WriteImage() calls that assume on case-insensitivity are now broken.

Test case program (which is just the first GraphicsMagick API demo
program with a single line added to set image->magick to "gif"):

bob@stretch64-build:~$ cat casetest.c
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <time.h>
#include <sys/types.h>
#include <magick/api.h>

int main ( int argc, char **argv )
{
  Image
    *image = (Image *) NULL;

  char
    infile[MaxTextExtent],
    outfile[MaxTextExtent];

  int
    arg = 1,
    exit_status = 0;

  ImageInfo
    *imageInfo;

  ExceptionInfo
    exception;

  InitializeMagick(NULL);
  imageInfo=CloneImageInfo(0);
  GetExceptionInfo(&exception);

  if (argc != 3)
    {
      (void) fprintf ( stderr, "Usage: %s infile outfile\n", argv[0] );
      (void) fflush(stderr);
      exit_status = 1;
      goto program_exit;
    }

  (void) strncpy(infile, argv[arg], MaxTextExtent-1 );
  arg++;
  (void) strncpy(outfile, argv[arg], MaxTextExtent-1 );

  (void) strcpy(imageInfo->filename, infile);
  image = ReadImage(imageInfo, &exception);
  if (image == (Image *) NULL)
    {
      CatchException(&exception);
      exit_status = 1;
      goto program_exit;
    }

  (void) strcpy(image->magick, "gif");
  (void) strcpy(image->filename, outfile);
  if (!WriteImage (imageInfo,image))
    {
      CatchException(&image->exception);
      exit_status = 1;
      goto program_exit;
    }

 program_exit:

  if (image != (Image *) NULL)
    DestroyImage(image);

  if (imageInfo != (ImageInfo *) NULL)
    DestroyImageInfo(imageInfo);
  DestroyMagick();

  return exit_status;
}

bob@stretch64-build:~$ dpkg-query -W libgraphicsmagick-q16-3
libgraphicsmagick-q16-3    1.3.25-8
bob@stretch64-build:~$ gcc -o casetest casetest.c -O
`GraphicsMagick-config --cppflags --ldflags --libs`
bob@stretch64-build:~$ identify x.png
x.png PPM 800x600 800x600+0+0 8-bit sRGB 1.44MB 0.000u 0:00.000
bob@stretch64-build:~$ rm xxx              
bob@stretch64-build:~$ ls -l xxx
ls: cannot access 'xxx': No such file or directory
bob@stretch64-build:~$ ./casetest x.png xxx
bob@stretch64-build:~$ ls -l xxx
-rw-r--r-- 1 bob bob 7620 Oct 19 12:55 xxx
bob@stretch64-build:~$ identify xxx
xxx GIF 800x600 800x600+0+0 8-bit sRGB 128c 7.62KB 0.000u 0:00.000

bob@stretch64-build:~$ sudo apt-get install 
libgraphicsmagick-q16-3=1.3.30+hg15796-1~deb9u1 
libgraphicsmagick1-dev=1.3.30+hg15796-1~deb9u1
Reading package lists... Done
...
Setting up libgraphicsmagick-q16-3 (1.3.30+hg15796-1~deb9u1) ...
Processing triggers for libc-bin (2.24-11+deb9u3) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up libgraphicsmagick1-dev (1.3.30+hg15796-1~deb9u1) ...
bob@stretch64-build:~$ dpkg-query -W libgraphicsmagick-q16-3
libgraphicsmagick-q16-3    1.3.30+hg15796-1~deb9u1
bob@stretch64-build:~$ gcc -o casetest casetest.c -O
`GraphicsMagick-config --cppflags --ldflags --libs`
bob@stretch64-build:~$ rm xxx
bob@stretch64-build:~$ ls -l xxx
ls: cannot access 'xxx': No such file or directory
bob@stretch64-build:~$ ./casetest x.png xxx
Magick: No encode delegate for this image format (gif) [No such file
or directory].
bob@stretch64-build:~$ ls -l xxx
ls: cannot access 'xxx': No such file or directory

If the:
  (void) strcpy(image->magick, "gif");
in the test case is changed to:
  (void) strcpy(image->magick, "GIF");

it works correctly against both GraphicsMagick versions.

TL;DR with 1.3.25 it generates a GIF image, and with 1.3.30 it reports that the 
'gif' delegate is missing.

I've also tested with 1.3.28 on bionic and it still works, so this is a >1.3.28 
change.

Needless to say, if someone has GraphicsMagick-based code which doesn't
case convert formats to upper case to set the magick of an output file,
upgrading to the 1.3.30 package will suddenly cause things to not work.

This sort of incompatibility seems like a highly unfortunate thing to
happen in what should be a stable security-based package update
since it puts admins in the position of have to choose between security
or applications continuing to work.

-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.ISO-8859-1, LC_CTYPE=en_CA.ISO-8859-1 (charmap=ISO-8859-1), 
LANGUAGE=en_CA:en (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libgraphicsmagick-q16-3 depends on:
ii  libbz2-1.0       1.0.6-8.1
ii  libc6            2.24-11+deb9u3
ii  libfreetype6     2.6.3-3.2
ii  libgomp1         6.3.0-18+deb9u1
ii  libice6          2:1.0.9-2
ii  libjbig0         2.1-3.1+b2
ii  libjpeg62-turbo  1:1.5.1-2
ii  liblcms2-2       2.8-4+deb9u1
ii  liblzma5         5.2.2-1.2+b1
ii  libpng16-16      1.6.28-1
ii  libsm6           2:1.2.2-1+b3
ii  libtiff5         4.0.8-2+deb9u2
ii  libwebp6         0.5.2-1
ii  libwmf0.2-7      0.2.8.4-10.6
ii  libx11-6         2:1.6.4-3
ii  libxext6         2:1.3.3-1+b2
ii  libxml2          2.9.4+dfsg1-2.2+deb9u2
ii  zlib1g           1:1.2.8.dfsg-5

Versions of packages libgraphicsmagick-q16-3 recommends:
ii  ghostscript  9.20~dfsg-3.2+deb9u5
ii  gsfonts      1:8.11+urwcyr1.0.7~pre44-4.3

Versions of packages libgraphicsmagick-q16-3 suggests:
pn  graphicsmagick-dbg  <none>

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: graphicsmagick
Source-Version: 1.3.30+hg15796-1~deb9u2

We believe that the bug you reported is fixed in the latest version of
graphicsmagick, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <[email protected]> (supplier of updated graphicsmagick 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 21 Oct 2018 17:36:20 -0400
Source: graphicsmagick
Binary: graphicsmagick libgraphicsmagick-q16-3 libgraphicsmagick1-dev 
libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphics-magick-perl 
graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat 
graphicsmagick-dbg
Architecture: source amd64 all
Version: 1.3.30+hg15796-1~deb9u2
Distribution: stretch-security
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <[email protected]>
Changed-By: Laszlo Boszormenyi (GCS) <[email protected]>
Description:
 graphicsmagick - collection of image processing tools
 graphicsmagick-dbg - format-independent image processing - debugging symbols
 graphicsmagick-imagemagick-compat - image processing tools providing 
ImageMagick interface
 graphicsmagick-libmagick-dev-compat - image processing libraries providing 
ImageMagick interface
 libgraphics-magick-perl - format-independent image processing - perl interface
 libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared 
library
 libgraphicsmagick++1-dev - format-independent image processing - C++ 
development files
 libgraphicsmagick-q16-3 - format-independent image processing - C shared 
library
 libgraphicsmagick1-dev - format-independent image processing - C development 
files
Closes: 911386
Changes:
 graphicsmagick (1.3.30+hg15796-1~deb9u2) stretch-security; urgency=medium
 .
   * Backport fix for case-insensitive static module loader (closes: #911386).
Checksums-Sha1:
 9e911bc00ee403e39be604cf25c837d2426f77fa 2870 
graphicsmagick_1.3.30+hg15796-1~deb9u2.dsc
 c6ff615611b913287711ed4094a63d2d8f9a0824 143424 
graphicsmagick_1.3.30+hg15796-1~deb9u2.debian.tar.xz
 7c87a5c92c91c118059b407d6041edf02051c93a 3416740 
graphicsmagick-dbg_1.3.30+hg15796-1~deb9u2_amd64.deb
 6e9cab59c224a999c2460a9e5a586e380c611ad4 50534 
graphicsmagick-imagemagick-compat_1.3.30+hg15796-1~deb9u2_all.deb
 3c9ac6430c9f0aa9b6c67eaed570e1cc4f5c874d 53960 
graphicsmagick-libmagick-dev-compat_1.3.30+hg15796-1~deb9u2_all.deb
 7b75073d672c02ffffefab783b49907d9f412e7b 12075 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.buildinfo
 a2ff7ded179f2ce609e2e20e800cf9ee430a744b 953268 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.deb
 02d17d72194c481285297f089da878e1e448bd2e 97144 
libgraphics-magick-perl_1.3.30+hg15796-1~deb9u2_amd64.deb
 ed4a6031687be8fc2ecdc1a2e38a238fae5f19b9 144678 
libgraphicsmagick++-q16-12_1.3.30+hg15796-1~deb9u2_amd64.deb
 57f095c476e18032e987b3f35e2f766491e8ed6b 331404 
libgraphicsmagick++1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb
 07bb070c4df73b8162561008e93a1a9a208eae17 1174498 
libgraphicsmagick-q16-3_1.3.30+hg15796-1~deb9u2_amd64.deb
 6074f2412cc00ee21c769013a3f6594f6719d29c 1409480 
libgraphicsmagick1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb
Checksums-Sha256:
 6ab184611b167ead48dd6f95cb0fbae3ceb50d171bc083f73ea7c76d05d71511 2870 
graphicsmagick_1.3.30+hg15796-1~deb9u2.dsc
 ebc1763a6b23b026bf905483f27c4f80134f602885f23f4889ebe7ecf67ecf7b 143424 
graphicsmagick_1.3.30+hg15796-1~deb9u2.debian.tar.xz
 b01dffd534a987b483ad62b0da8a19fd06d7ee87e906899a905a0180db64f613 3416740 
graphicsmagick-dbg_1.3.30+hg15796-1~deb9u2_amd64.deb
 24014d786dadb49ebae3f82f4b953d82a97d6f02da3b341ecb2cfe183ec0c38a 50534 
graphicsmagick-imagemagick-compat_1.3.30+hg15796-1~deb9u2_all.deb
 918fd84015562e74461c3f17e4bb12f970727b65dad9f8ddbd17a24057903849 53960 
graphicsmagick-libmagick-dev-compat_1.3.30+hg15796-1~deb9u2_all.deb
 f479a7f1773e04694c1670c5c68ca928e85095b2be91ee55bff9f068a193605d 12075 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.buildinfo
 328ead6c31342e9de7a716bac98edb1339a603094f2b07fb2ddae6ba475d98e5 953268 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.deb
 d4f6b2f1e0079fba71865d823862f0760cb2fbab7ac3aeb999681ba053fb736e 97144 
libgraphics-magick-perl_1.3.30+hg15796-1~deb9u2_amd64.deb
 e232b9bbca7f852df494789faac1b78f15b5e8114b904a031acd02166e8a1e42 144678 
libgraphicsmagick++-q16-12_1.3.30+hg15796-1~deb9u2_amd64.deb
 00c4670380094403098e0e16941c3c89273d539e97a6a7d0479cd0d7bb4cb65e 331404 
libgraphicsmagick++1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb
 a15ce4b8fdaa1f801a0766a57ab41d9e9f205528c27d5ae9db99cf8f89b14ac7 1174498 
libgraphicsmagick-q16-3_1.3.30+hg15796-1~deb9u2_amd64.deb
 98d2588852dfc90e82331fa9174cd5ac9a0275c721565a6eb256d74a1392b3fb 1409480 
libgraphicsmagick1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb
Files:
 dd611895fca63fdfa60f234c5af1230d 2870 graphics optional 
graphicsmagick_1.3.30+hg15796-1~deb9u2.dsc
 6729d2cbac3a91c4996cb6379cdd8c39 143424 graphics optional 
graphicsmagick_1.3.30+hg15796-1~deb9u2.debian.tar.xz
 711ca87ab9104e8410bcc3a58e1cffd3 3416740 debug optional 
graphicsmagick-dbg_1.3.30+hg15796-1~deb9u2_amd64.deb
 1cc392b618cefac4026ffb83c4a724a8 50534 graphics optional 
graphicsmagick-imagemagick-compat_1.3.30+hg15796-1~deb9u2_all.deb
 adea8aade98bf0815a88a017002784c6 53960 graphics optional 
graphicsmagick-libmagick-dev-compat_1.3.30+hg15796-1~deb9u2_all.deb
 76ef93d22abd8b70452bfb33aca67967 12075 graphics optional 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.buildinfo
 bd8eb6c7ee4a98e8b82c80985ea43059 953268 graphics optional 
graphicsmagick_1.3.30+hg15796-1~deb9u2_amd64.deb
 b1594f2dc36820e8251f4f4532e1c1b3 97144 perl optional 
libgraphics-magick-perl_1.3.30+hg15796-1~deb9u2_amd64.deb
 9f582da47953c21c51663e82e96c762c 144678 libs optional 
libgraphicsmagick++-q16-12_1.3.30+hg15796-1~deb9u2_amd64.deb
 8524870d02713e5eb1e067261bcffa18 331404 libdevel optional 
libgraphicsmagick++1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb
 7f0fa9b4e1e1c6c10c15fb8587c2149a 1174498 libs optional 
libgraphicsmagick-q16-3_1.3.30+hg15796-1~deb9u2_amd64.deb
 d3c608f3cb7b10accf8dad667ea6833a 1409480 libdevel optional 
libgraphicsmagick1-dev_1.3.30+hg15796-1~deb9u2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAlvUc6AACgkQ3OMQ54ZM
yL9gYQ/7BbWxHd+U33lmeHbTWy2/t1uXaqEdVAzs/zK4b/8R30zvVI9iKqx8etPO
2HFQntjhnsx18JJEl3AtG0U6gd8PQRlEyFWjTHOSjLYAkRXRwXAIkfiVNH0dewbX
q4KVN7v7xTxs6hqbgAOfvjTJJO/w8Fciww4mZk0SM+Cz25pNjFciJdg03vPpLXeN
t2ui4Y3CKMxi4WHXb3Z6gu6scjoXtS6MUh2r798AJzGXls0F3QdhIcgsRJn5mIMC
AIIhr0BbJz4K7rH9JzMdq5eWpL2K0toMIzOkSfAivCEkdfdofrEN7zfMhv8IJyLk
Ffk0np3U5jdY/e+OxwWwW9GruRaV5kpRnqQgOQ0Vc9OEF/zKYMTREZXyGglja9zy
SgTAKt531f2s/P0R1LkbWjNDys2pb7eiz1GjgMwLLEbHblX+UIWIhCLGYHeNKYKJ
7RZEqnVBWUt9tl1HCGoJRn96/MmzAgGhZy0fS0msUoxbnWd0TTUaU/hQ2EUShEok
XG26VeJO9FVRXDA5A6yCmGQyVpwvxiCrIGR5iCwhAx8lHkd6XxpgW1KJPeG8OXJE
gcNrwbwk1PHjCFlwjs+8Gd/XHxca4UR9X0xqQpQQ3z1AG+QsH1s4Qol+r5Xs3Csf
6lUmJrF8wMvjFwbK+IO0QXllDgzMmxIWcZOJG9uLJ8ucuIZhSOI=
=Qlqc
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to