-
c91b021...
by
Nish Aravamudan
on 2016-11-23
-
update-maintainer
-
fd65524...
by
Nish Aravamudan
on 2016-11-23
-
changelog
-
53820b8...
by
Nish Aravamudan
on 2016-11-23
-
merge-changelogs
-
aed1617...
by
Nish Aravamudan
on 2016-11-23
-
* Drop:
- Drop backported fixes to d/p/0070-Fix-PixelColor-off-by-one-on-i386.patch
[ Previously undocumented ]
-
2ca99d9...
by
Nish Aravamudan
on 2016-11-23
-
* Drop:
* Add backport of a54fe0e8 to fix segmentation faults during
php-imagick tests (LP: #1549942).
[ Squashed:
* Delete d/p/0076-Fix-segmentation-fault-with-php-imagick.patch
[ moved to d/p/0083-Fix-a-off-by-one-error-leading-to-segfault.patch ]
[ previously undocumented ]
]
-
5f36395...
by
Nish Aravamudan
on 2016-11-23
-
* Drop:
- SECURITY UPDATE: multiple security issues
+ debian/patches/*: synchronize large quantity of security fixes with
Debian's 8:6.8.9.9-5+deb8u5 release. Thanks to Bastien Roucariès for
the excellent work this update is based on!
+ CVE-2014-9907, CVE-2015-8957, CVE-2015-8958, CVE-2015-8959,
CVE-2016-4562, CVE-2016-4563, CVE-2016-4564, CVE-2016-5010,
CVE-2016-5687, CVE-2016-5688, CVE-2016-5689, CVE-2016-5690,
CVE-2016-5691, CVE-2016-5841, CVE-2016-5842, CVE-2016-6491,
CVE-2016-6823, CVE-2016-7101, CVE-2016-7513, CVE-2016-7514,
CVE-2016-7515, CVE-2016-7516, CVE-2016-7517, CVE-2016-7518,
CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, CVE-2016-7522,
CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526,
CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530,
CVE-2016-7531, CVE-2016-7532, CVE-2016-7533, CVE-2016-7534,
CVE-2016-7535, CVE-2016-7536, CVE-2016-7537, CVE-2016-7538,
CVE-2016-7539, CVE-2016-7540
[ Ideally, we could merge this, but it's stuck in z-p and I want to
make some progress. ]
-
13704a6...
by
Nish Aravamudan
on 2016-11-23
-
* SECURITY UPDATE: multiple security issues
- debian/patches/*: synchronize large quantity of security fixes with
Debian's 8:6.8.9.9-5+deb8u5 release. Thanks to Bastien Roucariès for
the excellent work this update is based on!
- CVE-2014-9907, CVE-2015-8957, CVE-2015-8958, CVE-2015-8959,
CVE-2016-4562, CVE-2016-4563, CVE-2016-4564, CVE-2016-5010,
CVE-2016-5687, CVE-2016-5688, CVE-2016-5689, CVE-2016-5690,
CVE-2016-5691, CVE-2016-5841, CVE-2016-5842, CVE-2016-6491,
CVE-2016-6823, CVE-2016-7101, CVE-2016-7513, CVE-2016-7514,
CVE-2016-7515, CVE-2016-7516, CVE-2016-7517, CVE-2016-7518,
CVE-2016-7519, CVE-2016-7520, CVE-2016-7521, CVE-2016-7522,
CVE-2016-7523, CVE-2016-7524, CVE-2016-7525, CVE-2016-7526,
CVE-2016-7527, CVE-2016-7528, CVE-2016-7529, CVE-2016-7530,
CVE-2016-7531, CVE-2016-7532, CVE-2016-7533, CVE-2016-7534,
CVE-2016-7535, CVE-2016-7536, CVE-2016-7537, CVE-2016-7538,
CVE-2016-7539, CVE-2016-7540
-
566ba8a...
by
Nish Aravamudan
on 2016-11-23
-
* Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000
but is not in main (LP: #711061).
[ Previously undocumented ]
-
98232be...
by
Nish Aravamudan
on 2016-11-23
-
* SECURITY UPDATE: popen() shell vulnerability
- d/p/0082-Disable-MAGICKCORE_HAVE_POPEN.patch
- CVE-2016-5118
-
628cc7d...
by
Nish Aravamudan
on 2016-11-23
-
* debian/README.Debian: explain use of --with-rsvg option.
[ Previously undocumented ]