Package: src:imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org
Imagemagick arbitrary module loading due to not escaping relative path
commit 3ed665639d7665fabdff33d77e3b8428854726da
Author: Cristy <urban-warr...@imagemagick.org>
Date: Thu Jun 2 13:44:20 2016 -0400
Coder path traversal is not authorized
Bug report provided by Masaaki Chida
Commit mix two thing, fix only the module problem
Fix loading arbitrary module from user side
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb
