Register | Log in

graphicsmagick

collection of image processing tools

Choose email to subscribe with

general

source: graphicsmagick (source, graphics)
version: 1.3.25-8
maintainer: Laszlo Boszormenyi (GCS) [DMD]
arch: all any
std-ver: 3.9.8

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.3.16-1.1
o-o-sec: 1.3.16-1.1+deb7u7
oldstable: 1.3.20-3+deb8u1
old-sec: 1.3.20-3+deb8u2
stable: 1.3.25-8
testing: 1.3.25-8
unstable: 1.3.25-8

versioned links

1.3.16-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.16-1.1+deb7u7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.20-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.20-3+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.25-8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

graphicsmagick
graphicsmagick-dbg
graphicsmagick-imagemagick-compat
graphicsmagick-libmagick-dev-compat
libgraphics-magick-perl
libgraphicsmagick++-q16-12
libgraphicsmagick++1-dev
libgraphicsmagick-q16-3
libgraphicsmagick1-dev

action needed

11 security issues in jessie

high

There are 11 open security issues in jessie.

11 important issues:

CVE-2016-7447: Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.
CVE-2017-9098: ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
CVE-2016-7446: Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.
CVE-2016-7449: The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an "unterminated" string.
CVE-2016-7448: The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the header information and the file size.
CVE-2016-3717: The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
CVE-2016-5241: magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file.
CVE-2016-5239: The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2016-3718: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2017-6335: The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value in a CMYKA TIFF file.
CVE-2016-3716: The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.

Please fix them.

Created: 2016-02-06 Last update: 2017-06-18 08:29

lintian reports 6 warnings

high

Lintian reports 6 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2015-03-04 Last update: 2016-09-07 00:59

Multiarch hinter reports 2 issue(s)

normal

There are issues with the multiarch metadata for this package.

graphicsmagick-dbg could be marked Multi-Arch: same
libgraphics-magick-perl could be marked Multi-Arch: same

Created: 2017-03-05 Last update: 2017-06-25 07:39

3 bugs tagged patch in the BTS

normal

The BTS contains patches fixing 3 bugs, consider including or untagging them.

Created: 2017-01-17 Last update: 2017-06-25 07:13

3 ignored security issues in wheezy

low

There are 3 open security issues in wheezy.

3 issues skipped by the security teams:

CVE-2016-9830: The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image.
CVE-2013-4589: The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.
CVE-2014-8355: PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

Please fix them.

Created: 2015-07-12 Last update: 2017-06-18 08:29

Build log checks report 2 warnings

low

Build log checks report 2 warnings

Created: 2016-04-08 Last update: 2016-12-08 06:51

news

[2017-05-26] Accepted graphicsmagick 1.3.16-1.1+deb7u7 (source amd64 all) into oldstable (Markus Koschany)
[2017-03-28] Accepted graphicsmagick 1.3.16-1.1+deb7u6 (source amd64 all) into oldstable (Antoine Beaupré)
[2017-02-27] graphicsmagick 1.3.25-8 MIGRATED to testing (Debian testing watch)
[2017-02-24] Accepted graphicsmagick 1.3.25-8 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2017-01-18] graphicsmagick 1.3.25-7 MIGRATED to testing (Debian testing watch)
[2016-12-25] Accepted graphicsmagick 1.3.25-7 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-12-07] Accepted graphicsmagick 1.3.25-6 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-10-26] Accepted graphicsmagick 1.3.16-1.1+deb7u5 (source amd64 all) into oldstable (Antoine Beaupré)
[2016-10-21] graphicsmagick 1.3.25-5 MIGRATED to testing (Debian testing watch)
[2016-10-18] Accepted graphicsmagick 1.3.25-5 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-10-11] graphicsmagick 1.3.25-4 MIGRATED to testing (Debian testing watch)
[2016-10-10] Accepted graphicsmagick 1.3.16-1.1+deb7u4 (source amd64 all) into oldstable (Brian May)
[2016-10-08] Accepted graphicsmagick 1.3.25-4 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-10-05] graphicsmagick 1.3.25-3 MIGRATED to testing (Debian testing watch)
[2016-10-02] Accepted graphicsmagick 1.3.25-3 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-09-19] graphicsmagick 1.3.25-2 MIGRATED to testing (Debian testing watch)
[2016-09-16] Accepted graphicsmagick 1.3.25-2 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-09-06] Accepted graphicsmagick 1.3.25-1 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-08-14] Accepted graphicsmagick 1.3.24+hg20160808-1 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-08-09] graphicsmagick 1.3.24-2 MIGRATED to testing (Debian testing watch)
[2016-07-28] Accepted graphicsmagick 1.3.24-2 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-07-11] Accepted graphicsmagick 1.3.16-1.1+deb7u3 (source amd64 all) into oldstable (signed by: Chris Lamb)
[2016-06-09] graphicsmagick 1.3.24-1 MIGRATED to testing (Debian testing watch)
[2016-06-02] Accepted graphicsmagick 1.3.16-1.1+deb7u2 (source amd64 all) into oldstable (signed by: Markus Koschany)
[2016-05-30] Accepted graphicsmagick 1.3.24-1 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-05-24] Accepted graphicsmagick 1.3.23-3 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2016-05-21] Accepted graphicsmagick 1.3.16-1.1+deb7u1 (source amd64 all) into oldstable (signed by: Markus Koschany)
[2016-03-06] graphicsmagick 1.3.23-2 MIGRATED to testing (Debian testing watch)
[2016-02-24] Accepted graphicsmagick 1.3.23-2 (source amd64 all) into unstable (Laszlo Boszormenyi (GCS)) (signed by: Laszlo Boszormenyi)
[2015-11-14] graphicsmagick 1.3.23-1 MIGRATED to testing (Britney)

1
2

bugs [bug history graph]

all: 28
RC: 0
I&N: 23
M&W: 5
F&P: 0

links

homepage
lintian (0, 6)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.3.25-8
3 bugs

Debian Package Tracker — Copyright 2013-2016 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Git Repository — How to contribute