lp:ubuntu/+source/imagemagick

Author: Ubuntu Git Importer
Author Date: 2019-10-22 00:09:12 UTC

DSC file for 8:6.9.10.23+dfsg-2.1ubuntu8

Author: Matthias Klose
Author Date: 2019-10-21 14:41:25 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu8 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 949779ab46d44f49dcfed04e42382e7550c46e61

New changelog entries:
  * Build without libheif, to untangle the perl transition.

Author: Matthias Klose
Author Date: 2019-10-21 14:41:25 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu8 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 949779ab46d44f49dcfed04e42382e7550c46e61

New changelog entries:
  * Build without libheif, to untangle the perl transition.

Author: Matthias Klose
Author Date: 2019-10-21 14:41:25 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu8 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 949779ab46d44f49dcfed04e42382e7550c46e61

New changelog entries:
  * Build without libheif, to untangle the perl transition.

Author: Gianfranco Costamagna
Author Date: 2019-09-18 15:18:53 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu6 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: de8e5a3fb881665ae8b33920b4a04cb57e8b8378

New changelog entries:
  * Revert last upload, now the transitions have ended, and security team
    thinks we have to fix packages failing to build, instead of reverting a
    security fix (see: LP bug: 1839596)

Author: Gianfranco Costamagna
Author Date: 2019-09-18 15:18:53 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu6 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: de8e5a3fb881665ae8b33920b4a04cb57e8b8378

New changelog entries:
  * Revert last upload, now the transitions have ended, and security team
    thinks we have to fix packages failing to build, instead of reverting a
    security fix (see: LP bug: 1839596)

Author: Ubuntu Git Importer
Author Date: 2019-09-07 17:52:22 UTC

DSC file for 8:6.9.7.4+dfsg-11+deb9u7

Author: Moritz Mühlenhoff
Author Date: 2019-04-25 19:05:09 UTC

Import patches-applied version 8:6.9.7.4+dfsg-11+deb9u7 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 20bdcaadedea746b9f2508a7e492382dcd9c79c3
Unapplied parent: 88a178cadd12c944dc7a56b4578c34f857385a42

New changelog entries:
  * CVE-2019-10650 (Closes: #926091)
  * CVE-2019-9956 (Closes: #925395)

Author: Moritz Mühlenhoff
Author Date: 2019-04-25 19:05:09 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-11+deb9u7 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 1a4b19196fb41b1bea3ecae4cdd8e5526e1eda82

New changelog entries:
  * CVE-2019-10650 (Closes: #926091)
  * CVE-2019-9956 (Closes: #925395)

Author: Marc Deslauriers
Author Date: 2019-06-20 17:36:46 UTC

Import patches-unapplied version 8:6.9.10.8+dfsg-1ubuntu2.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 99212f94f7402b5d6365e319bb908387bbc1556a

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-14434, CVE-2018-15607, CVE-2018-16323, CVE-2018-16412,
      CVE-2018-16413, CVE-2018-16644, CVE-2018-16645, CVE-2018-18023,
      CVE-2018-18024, CVE-2018-18025, CVE-2018-18544, CVE-2018-20467,
      CVE-2019-7175, CVE-2019-7395, CVE-2019-7396, CVE-2019-7397,
      CVE-2019-7398, CVE-2019-9956, CVE-2019-10649, CVE-2019-10650,
      CVE-2019-11470, CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:36:46 UTC

Import patches-unapplied version 8:6.9.10.8+dfsg-1ubuntu2.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 99212f94f7402b5d6365e319bb908387bbc1556a

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-14434, CVE-2018-15607, CVE-2018-16323, CVE-2018-16412,
      CVE-2018-16413, CVE-2018-16644, CVE-2018-16645, CVE-2018-18023,
      CVE-2018-18024, CVE-2018-18025, CVE-2018-18544, CVE-2018-20467,
      CVE-2019-7175, CVE-2019-7395, CVE-2019-7396, CVE-2019-7397,
      CVE-2019-7398, CVE-2019-9956, CVE-2019-10649, CVE-2019-10650,
      CVE-2019-11470, CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:36:46 UTC

Import patches-unapplied version 8:6.9.10.8+dfsg-1ubuntu2.2 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 99212f94f7402b5d6365e319bb908387bbc1556a

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-14434, CVE-2018-15607, CVE-2018-16323, CVE-2018-16412,
      CVE-2018-16413, CVE-2018-16644, CVE-2018-16645, CVE-2018-18023,
      CVE-2018-18024, CVE-2018-18025, CVE-2018-18544, CVE-2018-20467,
      CVE-2019-7175, CVE-2019-7395, CVE-2019-7396, CVE-2019-7397,
      CVE-2019-7398, CVE-2019-9956, CVE-2019-10649, CVE-2019-10650,
      CVE-2019-11470, CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-14 17:58:31 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu5.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b2540bb8f824cc77b357357a492101165170a69b

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-20467, CVE-2019-7175, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10131,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598

Author: Marc Deslauriers
Author Date: 2019-06-14 17:58:31 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu5.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b2540bb8f824cc77b357357a492101165170a69b

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-20467, CVE-2019-7175, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10131,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598

Author: Marc Deslauriers
Author Date: 2019-06-20 17:35:10 UTC

Import patches-unapplied version 8:6.9.10.14+dfsg-7ubuntu2.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 9a978a69824755d3d0f3579492f2352689cea856

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-20467, CVE-2019-7175, CVE-2019-7395, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10649,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-14 17:58:31 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu5.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: b2540bb8f824cc77b357357a492101165170a69b

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-20467, CVE-2019-7175, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10131,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598

Author: Marc Deslauriers
Author Date: 2019-06-20 17:35:10 UTC

Import patches-unapplied version 8:6.9.10.14+dfsg-7ubuntu2.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 9a978a69824755d3d0f3579492f2352689cea856

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-20467, CVE-2019-7175, CVE-2019-7395, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10649,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:38:05 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu6.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b073c8ff5fa055eddc5d608d4b330f7ec36dbc94

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: previous update did not correctly block
    encapsulated postscript (EPS) documents by default (LP: #1797647)
    - debian/patches/200-disable-ghostscript-formats.patch: correctly
      disable EPS files by default in policy.xml
  [ Marc Deslauriers ]
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175,
      CVE-2019-7395, CVE-2019-7396, CVE-2019-7397, CVE-2019-7398,
      CVE-2019-9956, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470,
      CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
   * debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:38:05 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu6.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b073c8ff5fa055eddc5d608d4b330f7ec36dbc94

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: previous update did not correctly block
    encapsulated postscript (EPS) documents by default (LP: #1797647)
    - debian/patches/200-disable-ghostscript-formats.patch: correctly
      disable EPS files by default in policy.xml
  [ Marc Deslauriers ]
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175,
      CVE-2019-7395, CVE-2019-7396, CVE-2019-7397, CVE-2019-7398,
      CVE-2019-9956, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470,
      CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
   * debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:38:05 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu6.7 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b073c8ff5fa055eddc5d608d4b330f7ec36dbc94

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: previous update did not correctly block
    encapsulated postscript (EPS) documents by default (LP: #1797647)
    - debian/patches/200-disable-ghostscript-formats.patch: correctly
      disable EPS files by default in policy.xml
  [ Marc Deslauriers ]
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175,
      CVE-2019-7395, CVE-2019-7396, CVE-2019-7397, CVE-2019-7398,
      CVE-2019-9956, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470,
      CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
   * debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 17:35:10 UTC

Import patches-unapplied version 8:6.9.10.14+dfsg-7ubuntu2.2 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 9a978a69824755d3d0f3579492f2352689cea856

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2018-20467, CVE-2019-7175, CVE-2019-7395, CVE-2019-7396,
      CVE-2019-7397, CVE-2019-7398, CVE-2019-9956, CVE-2019-10649,
      CVE-2019-10650, CVE-2019-11470, CVE-2019-11472, CVE-2019-11597,
      CVE-2019-11598
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 14:40:31 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu3 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 7f2409ffb7b60d88d31a8c75a5d262b1fd37f922

New changelog entries:
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Marc Deslauriers
Author Date: 2019-06-20 14:40:31 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1ubuntu3 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: 7f2409ffb7b60d88d31a8c75a5d262b1fd37f922

New changelog entries:
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
    - debian/tests/rose-*: remove pdf tests.

Author: Salvatore Bonaccorso
Author Date: 2019-05-03 14:34:26 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: af0bd795050655cfa7739d9e8e015553be561885

New changelog entries:
  * Non-maintainer upload.
  * Stack-based buffer overflow in function PopHexPixel in coders/ps.c
    (CVE-2019-9956) (Closes: #925395)
  * Heap-buffer-overflow in WriteTIFFImage of coders/tiff.c (CVE-2019-10650)
    (Closes: #926091)

Author: Salvatore Bonaccorso
Author Date: 2019-05-03 14:34:26 UTC

Import patches-unapplied version 8:6.9.10.23+dfsg-2.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: af0bd795050655cfa7739d9e8e015553be561885

New changelog entries:
  * Non-maintainer upload.
  * Stack-based buffer overflow in function PopHexPixel in coders/ps.c
    (CVE-2019-9956) (Closes: #925395)
  * Heap-buffer-overflow in WriteTIFFImage of coders/tiff.c (CVE-2019-10650)
    (Closes: #926091)

Author: Salvatore Bonaccorso
Author Date: 2019-05-03 14:34:26 UTC

Import patches-applied version 8:6.9.10.23+dfsg-2.1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 306f6d1654265ba3754cbba2959f6e803b028df7
Unapplied parent: 17179388b653e264fbf69fabbb658177ae08c0d3

New changelog entries:
  * Non-maintainer upload.
  * Stack-based buffer overflow in function PopHexPixel in coders/ps.c
    (CVE-2019-9956) (Closes: #925395)
  * Heap-buffer-overflow in WriteTIFFImage of coders/tiff.c (CVE-2019-10650)
    (Closes: #926091)

Author: Salvatore Bonaccorso
Author Date: 2019-05-03 14:34:26 UTC

Import patches-applied version 8:6.9.10.23+dfsg-2.1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 306f6d1654265ba3754cbba2959f6e803b028df7
Unapplied parent: 17179388b653e264fbf69fabbb658177ae08c0d3

New changelog entries:
  * Non-maintainer upload.
  * Stack-based buffer overflow in function PopHexPixel in coders/ps.c
    (CVE-2019-9956) (Closes: #925395)
  * Heap-buffer-overflow in WriteTIFFImage of coders/tiff.c (CVE-2019-10650)
    (Closes: #926091)

Author: Balint Reczey
Author Date: 2018-12-18 19:12:23 UTC

Import patches-unapplied version 8:6.9.10.14+dfsg-7ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 61f6b0db95cdc76247442907b147df0ea1317853

New changelog entries:
  * Revert hidden ABI break by changing MagickFloatType's size on i386

Author: Balint Reczey
Author Date: 2018-12-18 19:12:23 UTC

Import patches-unapplied version 8:6.9.10.14+dfsg-7ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 61f6b0db95cdc76247442907b147df0ea1317853

New changelog entries:
  * Revert hidden ABI break by changing MagickFloatType's size on i386

Author: Steve Beattie
Author Date: 2018-09-28 18:21:01 UTC

Import patches-unapplied version 8:6.7.7.10-6ubuntu3.13 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1aab96bf31e9adb33a83f8f3b5f75a6375f9aa33

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
  * SECURITY UPDATE: information leak in ReadXBMImage
    - debian/patches/CVE-2018-16323.patch: don't leave data
      uninitialized with negative pixels
    - CVE-2018-16323
  * SECURITY UPDATE: memory leak of colormap in WriteMPCImage
    - debian/patches/CVE-2018-14434.patch: free colormap on bad
      color depth
    - CVE-2018-14434
  * SECURITY UPDATE: memory leak in DecodeImage
    - debian/patches/CVE-2018-14435.patch: free memory when given a
      bad plane
    - CVE-2018-14435
  * SECURITY UPDATE: memory leak in ReadMIFFImage
    - debian/patches/CVE-2018-14436.patch: free memory when given a bad
      depth
    - CVE-2018-14436
  * SECURITY UPDATE: memory leak in parse8BIM
    - debian/patches/CVE-2018-14437-prereq.patch: check for negative
      values
    - debian/patches/CVE-2018-14437.patch: free strings in error
      conditions
    - CVE-2018-14437
  * SECURITY UPDATE: memory leak in ReadOneJNGImage
    - debian/patches/CVE-2018-16640-prereq-1.patch: define DestroyJNG()
    - debian/patches/CVE-2018-16640-prereq-2.patch: fix DestroyJNG()
    - debian/patches/CVE-2018-16640.patch: free memory on error
    - CVE-2018-16640
  * SECURITY UPDATE: denial of service due to out-of-bounds write
    in InsertRow
    - debian/patches/CVE-2018-16642.patch: improve checking for errors
    - CVE-2018-16642
  * SECURITY UPDATE: denial of service due to missing fputc checks
    - debian/patches/CVE-2018-16643.patch: check fputc calls for error
    - CVE-2018-16643
  * SECURITY UPDATE: denial of service in ReadDCMImage and
    ReadPICTImage
    - debian/patches/CVE-2018-16644-prereq-1.patch: make
      ReadRectangle() a boolean returning function and use it.
    - debian/patches/CVE-2018-16644-prereq-2.patch: check for EOF
      when reading from file
    - debian/patches/CVE-2018-16644-prereq-3.patch: define
      ThrowPICTException() macro and use it
    - debian/patches/CVE-2018-16644-1.patch,
      debian/patches/CVE-2018-16644-2.patch: check for invalid length
    - CVE-2018-16644
  * SECURITY UPDATE: excessive memory allocation issue in ReadBMPImage
    - debian/patches/CVE-2018-16645.patch: ensure number_colors is
      not too large
    - CVE-2018-16645
  * SECURITY UPDATE: denial of service in ReadOneJNGImage
    - debian/patches/CVE-2018-16749.patch; check for NULL color_image
    - CVE-2018-16749
  * SECURITY UPDATE: memory leak in formatIPTCfromBuffer
    - debian/patches/CVE-2018-16750.patch: free memory on error
    - CVE-2018-16750
  [ Marc Deslauriers ]
  * SECURITY REGRESSION: segfault in png to gif conversion (LP: #1793485)
    - debian/patches/0297-CVE-2017-13144.patch: removed pending further
      investigation.
    - debian/patches/CVE-2017-12430.patch: refreshed.

Author: Steve Beattie
Author Date: 2018-09-28 18:21:01 UTC

Import patches-unapplied version 8:6.7.7.10-6ubuntu3.13 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1aab96bf31e9adb33a83f8f3b5f75a6375f9aa33

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
  * SECURITY UPDATE: information leak in ReadXBMImage
    - debian/patches/CVE-2018-16323.patch: don't leave data
      uninitialized with negative pixels
    - CVE-2018-16323
  * SECURITY UPDATE: memory leak of colormap in WriteMPCImage
    - debian/patches/CVE-2018-14434.patch: free colormap on bad
      color depth
    - CVE-2018-14434
  * SECURITY UPDATE: memory leak in DecodeImage
    - debian/patches/CVE-2018-14435.patch: free memory when given a
      bad plane
    - CVE-2018-14435
  * SECURITY UPDATE: memory leak in ReadMIFFImage
    - debian/patches/CVE-2018-14436.patch: free memory when given a bad
      depth
    - CVE-2018-14436
  * SECURITY UPDATE: memory leak in parse8BIM
    - debian/patches/CVE-2018-14437-prereq.patch: check for negative
      values
    - debian/patches/CVE-2018-14437.patch: free strings in error
      conditions
    - CVE-2018-14437
  * SECURITY UPDATE: memory leak in ReadOneJNGImage
    - debian/patches/CVE-2018-16640-prereq-1.patch: define DestroyJNG()
    - debian/patches/CVE-2018-16640-prereq-2.patch: fix DestroyJNG()
    - debian/patches/CVE-2018-16640.patch: free memory on error
    - CVE-2018-16640
  * SECURITY UPDATE: denial of service due to out-of-bounds write
    in InsertRow
    - debian/patches/CVE-2018-16642.patch: improve checking for errors
    - CVE-2018-16642
  * SECURITY UPDATE: denial of service due to missing fputc checks
    - debian/patches/CVE-2018-16643.patch: check fputc calls for error
    - CVE-2018-16643
  * SECURITY UPDATE: denial of service in ReadDCMImage and
    ReadPICTImage
    - debian/patches/CVE-2018-16644-prereq-1.patch: make
      ReadRectangle() a boolean returning function and use it.
    - debian/patches/CVE-2018-16644-prereq-2.patch: check for EOF
      when reading from file
    - debian/patches/CVE-2018-16644-prereq-3.patch: define
      ThrowPICTException() macro and use it
    - debian/patches/CVE-2018-16644-1.patch,
      debian/patches/CVE-2018-16644-2.patch: check for invalid length
    - CVE-2018-16644
  * SECURITY UPDATE: excessive memory allocation issue in ReadBMPImage
    - debian/patches/CVE-2018-16645.patch: ensure number_colors is
      not too large
    - CVE-2018-16645
  * SECURITY UPDATE: denial of service in ReadOneJNGImage
    - debian/patches/CVE-2018-16749.patch; check for NULL color_image
    - CVE-2018-16749
  * SECURITY UPDATE: memory leak in formatIPTCfromBuffer
    - debian/patches/CVE-2018-16750.patch: free memory on error
    - CVE-2018-16750
  [ Marc Deslauriers ]
  * SECURITY REGRESSION: segfault in png to gif conversion (LP: #1793485)
    - debian/patches/0297-CVE-2017-13144.patch: removed pending further
      investigation.
    - debian/patches/CVE-2017-12430.patch: refreshed.

Author: Steve Beattie
Author Date: 2018-09-28 18:21:01 UTC

Import patches-unapplied version 8:6.7.7.10-6ubuntu3.13 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1aab96bf31e9adb33a83f8f3b5f75a6375f9aa33

New changelog entries:
  [ Steve Beattie ]
  * SECURITY UPDATE: code execution vulnerabilities in ghostscript as
    invoked by imagemagick
    - debian/patches/200-disable-ghostscript-formats.patch: disable
      ghostscript handled types by default in policy.xml
  * SECURITY UPDATE: information leak in ReadXBMImage
    - debian/patches/CVE-2018-16323.patch: don't leave data
      uninitialized with negative pixels
    - CVE-2018-16323
  * SECURITY UPDATE: memory leak of colormap in WriteMPCImage
    - debian/patches/CVE-2018-14434.patch: free colormap on bad
      color depth
    - CVE-2018-14434
  * SECURITY UPDATE: memory leak in DecodeImage
    - debian/patches/CVE-2018-14435.patch: free memory when given a
      bad plane
    - CVE-2018-14435
  * SECURITY UPDATE: memory leak in ReadMIFFImage
    - debian/patches/CVE-2018-14436.patch: free memory when given a bad
      depth
    - CVE-2018-14436
  * SECURITY UPDATE: memory leak in parse8BIM
    - debian/patches/CVE-2018-14437-prereq.patch: check for negative
      values
    - debian/patches/CVE-2018-14437.patch: free strings in error
      conditions
    - CVE-2018-14437
  * SECURITY UPDATE: memory leak in ReadOneJNGImage
    - debian/patches/CVE-2018-16640-prereq-1.patch: define DestroyJNG()
    - debian/patches/CVE-2018-16640-prereq-2.patch: fix DestroyJNG()
    - debian/patches/CVE-2018-16640.patch: free memory on error
    - CVE-2018-16640
  * SECURITY UPDATE: denial of service due to out-of-bounds write
    in InsertRow
    - debian/patches/CVE-2018-16642.patch: improve checking for errors
    - CVE-2018-16642
  * SECURITY UPDATE: denial of service due to missing fputc checks
    - debian/patches/CVE-2018-16643.patch: check fputc calls for error
    - CVE-2018-16643
  * SECURITY UPDATE: denial of service in ReadDCMImage and
    ReadPICTImage
    - debian/patches/CVE-2018-16644-prereq-1.patch: make
      ReadRectangle() a boolean returning function and use it.
    - debian/patches/CVE-2018-16644-prereq-2.patch: check for EOF
      when reading from file
    - debian/patches/CVE-2018-16644-prereq-3.patch: define
      ThrowPICTException() macro and use it
    - debian/patches/CVE-2018-16644-1.patch,
      debian/patches/CVE-2018-16644-2.patch: check for invalid length
    - CVE-2018-16644
  * SECURITY UPDATE: excessive memory allocation issue in ReadBMPImage
    - debian/patches/CVE-2018-16645.patch: ensure number_colors is
      not too large
    - CVE-2018-16645
  * SECURITY UPDATE: denial of service in ReadOneJNGImage
    - debian/patches/CVE-2018-16749.patch; check for NULL color_image
    - CVE-2018-16749
  * SECURITY UPDATE: memory leak in formatIPTCfromBuffer
    - debian/patches/CVE-2018-16750.patch: free memory on error
    - CVE-2018-16750
  [ Marc Deslauriers ]
  * SECURITY REGRESSION: segfault in png to gif conversion (LP: #1793485)
    - debian/patches/0297-CVE-2017-13144.patch: removed pending further
      investigation.
    - debian/patches/CVE-2017-12430.patch: refreshed.

Author: Corey Bryant
Author Date: 2018-08-28 13:45:08 UTC

Import patches-unapplied version 8:6.9.10.8+dfsg-1ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 162e99cfaacc8eed66836c1610d30967be6c0ab9

New changelog entries:
  * Stop installing the Debian-specific .desktop for the display program.
    (LP: #1740741, LP: #1740743, LP: #1717951, LP: #1615435,
    Closes: #675617, #677318)

Author: Corey Bryant
Author Date: 2018-08-28 13:45:08 UTC

Import patches-unapplied version 8:6.9.10.8+dfsg-1ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 162e99cfaacc8eed66836c1610d30967be6c0ab9

New changelog entries:
  * Stop installing the Debian-specific .desktop for the display program.
    (LP: #1740741, LP: #1740743, LP: #1717951, LP: #1615435,
    Closes: #675617, #677318)

Author: Marc Deslauriers
Author Date: 2018-07-10 14:09:43 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu2.3 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 8b447f17ac8decf99cd07f810c58de82730793a1

New changelog entries:
  * SECURITY UPDATE: out-of-bounds write in ReadBMPImage and WriteBMPImage
    - debian/patches/CVE-2018-12599.patch: use proper lengths in
      coders/bmp.c.
    - CVE-2018-12599
  * SECURITY UPDATE: out-of-bounds write in ReadDIBImage and WriteDIBImage
    - debian/patches/CVE-2018-12600.patch: use proper lengths in
      coders/dib.c.
    - CVE-2018-12600
  * SECURITY UPDATE: memory leak in XMagickCommand
    - debian/patches/CVE-2018-13153.patch: free memory in magick/animate.c.
    - CVE-2018-13153

Author: Marc Deslauriers
Author Date: 2018-07-10 14:09:43 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu2.3 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 8b447f17ac8decf99cd07f810c58de82730793a1

New changelog entries:
  * SECURITY UPDATE: out-of-bounds write in ReadBMPImage and WriteBMPImage
    - debian/patches/CVE-2018-12599.patch: use proper lengths in
      coders/bmp.c.
    - CVE-2018-12599
  * SECURITY UPDATE: out-of-bounds write in ReadDIBImage and WriteDIBImage
    - debian/patches/CVE-2018-12600.patch: use proper lengths in
      coders/dib.c.
    - CVE-2018-12600
  * SECURITY UPDATE: memory leak in XMagickCommand
    - debian/patches/CVE-2018-13153.patch: free memory in magick/animate.c.
    - CVE-2018-13153

Author: Marc Deslauriers
Author Date: 2018-07-10 14:09:43 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu2.3 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 8b447f17ac8decf99cd07f810c58de82730793a1

New changelog entries:
  * SECURITY UPDATE: out-of-bounds write in ReadBMPImage and WriteBMPImage
    - debian/patches/CVE-2018-12599.patch: use proper lengths in
      coders/bmp.c.
    - CVE-2018-12599
  * SECURITY UPDATE: out-of-bounds write in ReadDIBImage and WriteDIBImage
    - debian/patches/CVE-2018-12600.patch: use proper lengths in
      coders/dib.c.
    - CVE-2018-12600
  * SECURITY UPDATE: memory leak in XMagickCommand
    - debian/patches/CVE-2018-13153.patch: free memory in magick/animate.c.
    - CVE-2018-13153

Author: Bastien Roucariès
Author Date: 2018-06-25 12:29:02 UTC

Import patches-unapplied version 8:6.9.10.2+dfsg-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: a99f4ddc1f3583f6389e753924bc7c7267e9fec8

New changelog entries:
  * Bug fix: "FTBFS on i386: testsuite failure in Magick++/tests/tests.tap
    2", thanks to Sven Joachim (Closes: #893953).
  * Bug fix: "drop libtool-bin from Build-Depends", thanks to Helmut
    Grohne (Closes: #893925).
  * Move to git dpm
  * Move to salsa
  * SO dump
  * Fix security bugs:
    + CVE-2018-9133: Excessive iteration in the DecodeLabImage
      and EncodeLabImage functions (coders/tiff.c), which results
      in a hang (tens of minutes) with a tiny PoC file.
      Remote attackers could leverage this vulnerability
      to cause a denial of service via a crafted tiff file.
      (Closes: #894848)
    + CVE-2018-9133: SetGrayscaleImage in the quantize.c file
      allows attackers to cause a heap-based buffer over-read
      via a crafted file.
    + CVE-2018-11624: the ReadMATImage function in coders/mat.c
      allows attackers to cause a use after free via a crafted file.
    + CVE-2018-11625: the SetGrayscaleImage in the quantize.c
      file allows attackers to cause a heap-based buffer over-read
      via a crafted file.
    + CVE-2018-10177: An infinite loop is present in the
      ReadOneMNGImage function of the coders/png.c file.
      Remote attackers could leverage this vulnerability
      to cause a denial of service via a crafted mng file.
    + CVE-2017-14528: Tested (with and without valgrind) and found immune.
      The TIFFSetProfiles function in coders/tiff.c has incorrect
      expectations about whether LibTIFF TIFFGetField return values
      imply that data validation has occurred, which allows remote attackers
      to cause a denial of service (use-after-free after an invalid call
      to TIFFSetField, and application crash) via a crafted file.
    + CVE-2018-11624: heap-based buffer over-read in IsWEBPImageLossless
      in coders/webp.c.
    + CVE-2018-10805: a memory leak in ReadYCBCRImage in coders/ycbcr.c.
      (Closes: #898218).
    + CVE-2018-10804: a memory leak in WriteTIFFImage in coders/tiff.c.
      (Closes: #898217)
    + CVE-2018-12599: the ReadBMPImage and WriteBMPImage functions
      in coders/bmp.c allow attackers to cause an out of bounds write
      via a crafted file.
    + CVE-2018-12600: the ReadDIBImage and WriteDIBImage in coders/dib.c
      allow attackers to cause an out of bounds write via a crafted file.

Author: Bastien Roucariès
Author Date: 2018-06-25 12:29:02 UTC

Import patches-applied version 8:6.9.10.2+dfsg-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 1fa39c4ea0e14166720f9e227403fbee45ff2162
Unapplied parent: 75da47f2bacb65d94e3cee7dc4ece0bfb9af5a10

New changelog entries:
  * Bug fix: "FTBFS on i386: testsuite failure in Magick++/tests/tests.tap
    2", thanks to Sven Joachim (Closes: #893953).
  * Bug fix: "drop libtool-bin from Build-Depends", thanks to Helmut
    Grohne (Closes: #893925).
  * Move to git dpm
  * Move to salsa
  * SO dump
  * Fix security bugs:
    + CVE-2018-9133: Excessive iteration in the DecodeLabImage
      and EncodeLabImage functions (coders/tiff.c), which results
      in a hang (tens of minutes) with a tiny PoC file.
      Remote attackers could leverage this vulnerability
      to cause a denial of service via a crafted tiff file.
      (Closes: #894848)
    + CVE-2018-9133: SetGrayscaleImage in the quantize.c file
      allows attackers to cause a heap-based buffer over-read
      via a crafted file.
    + CVE-2018-11624: the ReadMATImage function in coders/mat.c
      allows attackers to cause a use after free via a crafted file.
    + CVE-2018-11625: the SetGrayscaleImage in the quantize.c
      file allows attackers to cause a heap-based buffer over-read
      via a crafted file.
    + CVE-2018-10177: An infinite loop is present in the
      ReadOneMNGImage function of the coders/png.c file.
      Remote attackers could leverage this vulnerability
      to cause a denial of service via a crafted mng file.
    + CVE-2017-14528: Tested (with and without valgrind) and found immune.
      The TIFFSetProfiles function in coders/tiff.c has incorrect
      expectations about whether LibTIFF TIFFGetField return values
      imply that data validation has occurred, which allows remote attackers
      to cause a denial of service (use-after-free after an invalid call
      to TIFFSetField, and application crash) via a crafted file.
    + CVE-2018-11624: heap-based buffer over-read in IsWEBPImageLossless
      in coders/webp.c.
    + CVE-2018-10805: a memory leak in ReadYCBCRImage in coders/ycbcr.c.
      (Closes: #898218).
    + CVE-2018-10804: a memory leak in WriteTIFFImage in coders/tiff.c.
      (Closes: #898217)
    + CVE-2018-12599: the ReadBMPImage and WriteBMPImage functions
      in coders/bmp.c allow attackers to cause an out of bounds write
      via a crafted file.
    + CVE-2018-12600: the ReadDIBImage and WriteDIBImage in coders/dib.c
      allow attackers to cause an out of bounds write via a crafted file.

Author: Markus Koschany
Author Date: 2018-05-06 16:28:48 UTC

Import patches-applied version 8:6.8.9.9-5+deb8u12 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 0787bb47d236be615025f54f0ce26b04f8c10045
Unapplied parent: f9185dbda8a23d9818fbf529e4960396997a851d

New changelog entries:
  * Non-maintainer upload.
  * Fix the following security vulnerabilities:
    - CVE-2017-10995: heap-based buffer over-read and application crash via a
      crafted MNG image. (Closes: #867748)
    - CVE-2017-11533: heap-based buffer over-read in the WriteUILImage()
      function in coders/uil.c. (Closes: #869834)
    - CVE-2017-11535: heap-based buffer over-read in the WritePSImage()
      function in coders/ps.c. (Closes: #869827)
    - CVE-2017-11639: heap-based buffer over-read in the WriteCIPImage()
      function in coders/cip.c. (Closes: #870065)
    - CVE-2017-13143: ReadMATImage function in coders/mat.c uses uninitialized
      data, which might allow remote attackers to obtain sensitive information
      from process memory. (Closes: #870012)
    - CVE-2017-17504: heap-based buffer over-read. (Closes: #885340)
    - CVE-2017-17879: heap-based buffer over-read in ReadOneMNGImage
      in coders/png.c. (Closes: #885125)
    - CVE-2018-5248: heap-based buffer over-read in coders/sixel.c
      in the ReadSIXELImage function. (Closes: #886588)

Author: Markus Koschany
Author Date: 2018-05-06 16:28:48 UTC

Import patches-unapplied version 8:6.8.9.9-5+deb8u12 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: f2e8cc81d8b11e29fcff05309d83b05a14c69d0c

New changelog entries:
  * Non-maintainer upload.
  * Fix the following security vulnerabilities:
    - CVE-2017-10995: heap-based buffer over-read and application crash via a
      crafted MNG image. (Closes: #867748)
    - CVE-2017-11533: heap-based buffer over-read in the WriteUILImage()
      function in coders/uil.c. (Closes: #869834)
    - CVE-2017-11535: heap-based buffer over-read in the WritePSImage()
      function in coders/ps.c. (Closes: #869827)
    - CVE-2017-11639: heap-based buffer over-read in the WriteCIPImage()
      function in coders/cip.c. (Closes: #870065)
    - CVE-2017-13143: ReadMATImage function in coders/mat.c uses uninitialized
      data, which might allow remote attackers to obtain sensitive information
      from process memory. (Closes: #870012)
    - CVE-2017-17504: heap-based buffer over-read. (Closes: #885340)
    - CVE-2017-17879: heap-based buffer over-read in ReadOneMNGImage
      in coders/png.c. (Closes: #885125)
    - CVE-2018-5248: heap-based buffer over-read in coders/sixel.c
      in the ReadSIXELImage function. (Closes: #886588)

Author: Jeremy Bicha
Author Date: 2018-04-06 13:20:04 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu6 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c64faf52cdf947d5c293a479f9383b09f4be6c4f

New changelog entries:
  * Stop installing the Debian-specific .desktop for the display program.
    (LP: #1740741, LP: #1740743, LP: #1717951, LP: #1615435,
    Closes: #675617, #677318)

Author: Jeremy Bicha
Author Date: 2018-04-06 13:20:04 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu6 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c64faf52cdf947d5c293a479f9383b09f4be6c4f

New changelog entries:
  * Stop installing the Debian-specific .desktop for the display program.
    (LP: #1740741, LP: #1740743, LP: #1717951, LP: #1615435,
    Closes: #675617, #677318)

Author: Ubuntu Git Importer
Author Date: 2018-03-20 16:47:16 UTC

pristine-tar data for imagemagick_6.9.9.39+dfsg.orig.tar.xz

Author: Ubuntu Git Importer
Author Date: 2018-03-14 19:07:53 UTC

pristine-tar data for imagemagick_6.9.7.4+dfsg.orig.tar.xz

Author: Matthias Klose
Author Date: 2017-08-07 15:21:52 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 83c7c22767916b07f104640772523127fd5bcd96

New changelog entries:
  * No-change rebuild for GCC 7 abi mangling change.

Author: Matthias Klose
Author Date: 2017-08-07 15:21:52 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-16ubuntu2 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 83c7c22767916b07f104640772523127fd5bcd96

New changelog entries:
  * No-change rebuild for GCC 7 abi mangling change.

Author: Marc Deslauriers
Author Date: 2017-07-21 12:30:46 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-3ubuntu1.2 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: fe6ed611728e7debcf1ef69cdcbc65ee3ffc65f0

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.9.7.4+dfsg-12 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-9261, CVE-2017-9262, CVE-2017-9405, CVE-2017-9407,
      CVE-2017-9409, CVE-2017-9439, CVE-2017-9440, CVE-2017-9501,
      CVE-2017-10928, CVE-2017-11141, CVE-2017-11170, CVE-2017-11188,
      CVE-2017-11352, CVE-2017-11360, CVE-2017-11447, CVE-2017-11448,
      CVE-2017-11449, CVE-2017-11450, CVE-2017-11478

Author: Marc Deslauriers
Author Date: 2017-07-21 12:30:46 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-3ubuntu1.2 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: fe6ed611728e7debcf1ef69cdcbc65ee3ffc65f0

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.9.7.4+dfsg-12 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-9261, CVE-2017-9262, CVE-2017-9405, CVE-2017-9407,
      CVE-2017-9409, CVE-2017-9439, CVE-2017-9440, CVE-2017-9501,
      CVE-2017-10928, CVE-2017-11141, CVE-2017-11170, CVE-2017-11188,
      CVE-2017-11352, CVE-2017-11360, CVE-2017-11447, CVE-2017-11448,
      CVE-2017-11449, CVE-2017-11450, CVE-2017-11478

Author: Marc Deslauriers
Author Date: 2017-07-21 12:30:46 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-3ubuntu1.2 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: fe6ed611728e7debcf1ef69cdcbc65ee3ffc65f0

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.9.7.4+dfsg-12 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-9261, CVE-2017-9262, CVE-2017-9405, CVE-2017-9407,
      CVE-2017-9409, CVE-2017-9439, CVE-2017-9440, CVE-2017-9501,
      CVE-2017-10928, CVE-2017-11141, CVE-2017-11170, CVE-2017-11188,
      CVE-2017-11352, CVE-2017-11360, CVE-2017-11447, CVE-2017-11448,
      CVE-2017-11449, CVE-2017-11450, CVE-2017-11478

Author: Marc Deslauriers
Author Date: 2017-05-26 11:47:08 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu8.6 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: f09bf0704d679219e4961c28b6ce57c73c7f4c9d

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u9 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-7606, CVE-2017-7619, CVE-2017-7941, CVE-2017-7943,
      CVE-2017-8343, CVE-2017-8344, CVE-2017-8345, CVE-2017-8346,
      CVE-2017-8347, CVE-2017-8348, CVE-2017-8349, CVE-2017-8350,
      CVE-2017-8351, CVE-2017-8352, CVE-2017-8353, CVE-2017-8354,
      CVE-2017-8355, CVE-2017-8356, CVE-2017-8357, CVE-2017-8765,
      CVE-2017-8830, CVE-2017-9098, CVE-2017-9141, CVE-2017-9142,
      CVE-2017-9143, CVE-2017-9144

Author: Marc Deslauriers
Author Date: 2017-05-26 11:47:08 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu8.6 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: f09bf0704d679219e4961c28b6ce57c73c7f4c9d

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u9 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-7606, CVE-2017-7619, CVE-2017-7941, CVE-2017-7943,
      CVE-2017-8343, CVE-2017-8344, CVE-2017-8345, CVE-2017-8346,
      CVE-2017-8347, CVE-2017-8348, CVE-2017-8349, CVE-2017-8350,
      CVE-2017-8351, CVE-2017-8352, CVE-2017-8353, CVE-2017-8354,
      CVE-2017-8355, CVE-2017-8356, CVE-2017-8357, CVE-2017-8765,
      CVE-2017-8830, CVE-2017-9098, CVE-2017-9141, CVE-2017-9142,
      CVE-2017-9143, CVE-2017-9144

Author: Marc Deslauriers
Author Date: 2017-05-26 11:47:08 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu8.6 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: f09bf0704d679219e4961c28b6ce57c73c7f4c9d

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u9 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-7606, CVE-2017-7619, CVE-2017-7941, CVE-2017-7943,
      CVE-2017-8343, CVE-2017-8344, CVE-2017-8345, CVE-2017-8346,
      CVE-2017-8347, CVE-2017-8348, CVE-2017-8349, CVE-2017-8350,
      CVE-2017-8351, CVE-2017-8352, CVE-2017-8353, CVE-2017-8354,
      CVE-2017-8355, CVE-2017-8356, CVE-2017-8357, CVE-2017-8765,
      CVE-2017-8830, CVE-2017-9098, CVE-2017-9141, CVE-2017-9142,
      CVE-2017-9143, CVE-2017-9144

Author: Gianfranco Costamagna
Author Date: 2017-04-07 21:25:27 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-3ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 53ebbe1e9a15245e29d43a5c1d8bee9ae9245784

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000
      but is not in main (LP: #711061).
      + Regenerate d/control file with `debian/rules update_pkg`
    - demote libmagickcore-6.q16hdri-3-extra and libmagickcore-6.q16-3-extra
      Recommends on libjxr-tools to Suggests, as it is in universe.

Author: Gianfranco Costamagna
Author Date: 2017-04-07 21:25:27 UTC

Import patches-unapplied version 8:6.9.7.4+dfsg-3ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 53ebbe1e9a15245e29d43a5c1d8bee9ae9245784

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000
      but is not in main (LP: #711061).
      + Regenerate d/control file with `debian/rules update_pkg`
    - demote libmagickcore-6.q16hdri-3-extra and libmagickcore-6.q16-3-extra
      Recommends on libjxr-tools to Suggests, as it is in universe.

Author: Marc Deslauriers
Author Date: 2017-03-14 13:55:55 UTC

Import patches-unapplied version 8:6.6.9.7-5ubuntu3.9 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 20bab6dbed7befb61dd7c75736d76f35d1964657

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u8 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-6498, CVE-2017-6500

Author: Marc Deslauriers
Author Date: 2017-03-14 13:55:55 UTC

Import patches-unapplied version 8:6.6.9.7-5ubuntu3.9 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 20bab6dbed7befb61dd7c75736d76f35d1964657

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u8 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-6498, CVE-2017-6500

Author: Marc Deslauriers
Author Date: 2017-03-14 13:55:55 UTC

Import patches-unapplied version 8:6.6.9.7-5ubuntu3.9 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 20bab6dbed7befb61dd7c75736d76f35d1964657

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - debian/patches/*: synchronize security fixes with Debian's
      8:6.8.9.9-5+deb8u8 release. Once again, thanks to Bastien Roucariès
      for the excellent work this update is based on!
    - CVE-2017-6498, CVE-2017-6500

Author: Jeremy Bicha
Author Date: 2016-08-12 21:18:29 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu8 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: bb8bdce770d50532ab32be0e1d070ee97cfc9d2a

New changelog entries:
  * Drop useless dependency on jasper. Closes # 818203. (LP: #1612822)

Author: Jeremy Bicha
Author Date: 2016-08-12 21:18:29 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu8 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: bb8bdce770d50532ab32be0e1d070ee97cfc9d2a

New changelog entries:
  * Drop useless dependency on jasper. Closes # 818203. (LP: #1612822)

Author: Brian May
Author Date: 2016-03-06 04:43:39 UTC

Import patches-unapplied version 8:6.7.7.10-5+deb7u4 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: 38885caef1665e6adb1eb5b291bab768452cb9cd

New changelog entries:
  * Null pointer access in magick/constitute.c (closes: #811308)
    https://github.com/ImageMagick/ImageMagick/pull/34
    0071-Prevent-null-pointer-access-in-magick-constitute.c.patch
  * IM 6.9.2 crash with some PNG (closes: #811308, LP: #1492881)
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=28466
    0072-Fixed-out-of-bounds-error-in-SpliceImage.patch
  * Add fix-overflow-in-icon-parsing.patch to fix an integer overflow
    that can lead to a buffer overrun in the icon parsing code.
  * Add fix-overflow-in-pict-parsing.patch to fix an integer overflow
    that can lead to a double free.

Author: Brian May
Author Date: 2016-03-06 04:43:39 UTC

Import patches-applied version 8:6.7.7.10-5+deb7u4 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: e67063f1b3cf84fd0a2ca929465b0feb3d334c2e
Unapplied parent: b375e145a8036b14a5fef16c4799cc98988b922e

New changelog entries:
  * Null pointer access in magick/constitute.c (closes: #811308)
    https://github.com/ImageMagick/ImageMagick/pull/34
    0071-Prevent-null-pointer-access-in-magick-constitute.c.patch
  * IM 6.9.2 crash with some PNG (closes: #811308, LP: #1492881)
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=28466
    0072-Fixed-out-of-bounds-error-in-SpliceImage.patch
  * Add fix-overflow-in-icon-parsing.patch to fix an integer overflow
    that can lead to a buffer overrun in the icon parsing code.
  * Add fix-overflow-in-pict-parsing.patch to fix an integer overflow
    that can lead to a double free.

Author: Marc Deslauriers
Author Date: 2016-06-01 17:09:08 UTC

Import patches-unapplied version 8:6.8.9.9-5ubuntu2.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: 81b250af5897c89c1d8810ae1f6985bd06a915c6

New changelog entries:
  * SECURITY UPDATE: ImageTragick remote code execution
    - d/p/0076-Disable-EPHEMERAL-URL-HTTPS-MVG-MSL-TEXT-SHOW-WIN-and-PLT-coders.patch
    - d/p/0077-Remove-PLT-Gnuplot-decoder.patch
    - d/p/0078-Sanitize-input-filename-for-http-and-https-delegates.patch
    - d/p/0079-Indirect-filename-must-be-authorized-by-policy.patch
    - d/p/0080-Prevent-indirect-reads-with-label-at.patch
    - d/p/0081-Less-secure-coders-require-explicit-reference.patch
    - debian/rules: build with --with-rsvg.
    - CVE-2016-3714
    - CVE-2016-3715
    - CVE-2016-3716
    - CVE-2016-3717
    - CVE-2016-3718
  * SECURITY UPDATE: popen() shell vulnerability
    - d/p/0082-Disable-MAGICKCORE_HAVE_POPEN.patch
    - CVE-2016-5118

Author: Marc Deslauriers
Author Date: 2016-06-01 17:09:08 UTC

Import patches-unapplied version 8:6.8.9.9-5ubuntu2.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: 81b250af5897c89c1d8810ae1f6985bd06a915c6

New changelog entries:
  * SECURITY UPDATE: ImageTragick remote code execution
    - d/p/0076-Disable-EPHEMERAL-URL-HTTPS-MVG-MSL-TEXT-SHOW-WIN-and-PLT-coders.patch
    - d/p/0077-Remove-PLT-Gnuplot-decoder.patch
    - d/p/0078-Sanitize-input-filename-for-http-and-https-delegates.patch
    - d/p/0079-Indirect-filename-must-be-authorized-by-policy.patch
    - d/p/0080-Prevent-indirect-reads-with-label-at.patch
    - d/p/0081-Less-secure-coders-require-explicit-reference.patch
    - debian/rules: build with --with-rsvg.
    - CVE-2016-3714
    - CVE-2016-3715
    - CVE-2016-3716
    - CVE-2016-3717
    - CVE-2016-3718
  * SECURITY UPDATE: popen() shell vulnerability
    - d/p/0082-Disable-MAGICKCORE_HAVE_POPEN.patch
    - CVE-2016-5118

Author: Marc Deslauriers
Author Date: 2016-06-01 17:09:08 UTC

Import patches-unapplied version 8:6.8.9.9-5ubuntu2.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: 81b250af5897c89c1d8810ae1f6985bd06a915c6

New changelog entries:
  * SECURITY UPDATE: ImageTragick remote code execution
    - d/p/0076-Disable-EPHEMERAL-URL-HTTPS-MVG-MSL-TEXT-SHOW-WIN-and-PLT-coders.patch
    - d/p/0077-Remove-PLT-Gnuplot-decoder.patch
    - d/p/0078-Sanitize-input-filename-for-http-and-https-delegates.patch
    - d/p/0079-Indirect-filename-must-be-authorized-by-policy.patch
    - d/p/0080-Prevent-indirect-reads-with-label-at.patch
    - d/p/0081-Less-secure-coders-require-explicit-reference.patch
    - debian/rules: build with --with-rsvg.
    - CVE-2016-3714
    - CVE-2016-3715
    - CVE-2016-3716
    - CVE-2016-3717
    - CVE-2016-3718
  * SECURITY UPDATE: popen() shell vulnerability
    - d/p/0082-Disable-MAGICKCORE_HAVE_POPEN.patch
    - CVE-2016-5118

Author: Iain Lane
Author Date: 2016-04-18 12:29:50 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu5 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: a14cb59bc05f5eb19307bb562bfebc14b4e042b3

New changelog entries:
  * debian/rules: Use LCQUANTUMDEPTH when generating display-im6.desktop too.
    Fixes broken icon in .desktop file. (LP: #1558409)

Author: Iain Lane
Author Date: 2016-04-18 12:29:50 UTC

Import patches-unapplied version 8:6.8.9.9-7ubuntu5 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: a14cb59bc05f5eb19307bb562bfebc14b4e042b3

New changelog entries:
  * debian/rules: Use LCQUANTUMDEPTH when generating display-im6.desktop too.
    Fixes broken icon in .desktop file. (LP: #1558409)

Author: Martin Pitt
Author Date: 2015-08-06 10:28:02 UTC

Import patches-unapplied version 8:6.8.9.9-5ubuntu2 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 0925bb34b6306f62609fc87335aaf824e5ba01d6

New changelog entries:
  * No-change rebuild against libopenexr22.

Author: Martin Pitt
Author Date: 2015-08-06 10:28:02 UTC

Import patches-unapplied version 8:6.8.9.9-5ubuntu2 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 0925bb34b6306f62609fc87335aaf824e5ba01d6

New changelog entries:
  * No-change rebuild against libopenexr22.

Author: Bastien Roucariès
Author Date: 2014-12-29 10:51:58 UTC

Import patches-unapplied version 8:6.8.9.9-5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6499995b9926b619fd0da8ba823dcb04a6de7d33

New changelog entries:
  * Fix incorrect fix for xpm security problem.
    This patch fixed the buffer overflow but
    xpm coder output garbage, thanks to Adam Sjøgren
    (Closes: #773980).
  * Workarround "Imagemagick FTBFS on mips on mips-aql-* not on ball".
    Do not execute testsuite if FPU is not present. Security team
    want this bug fixed in order to ease it work, thanks
    to Ivo De Decker (Closes: #770009).

Author: Bastien Roucariès
Author Date: 2014-12-29 10:51:58 UTC

Import patches-unapplied version 8:6.8.9.9-5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6499995b9926b619fd0da8ba823dcb04a6de7d33

New changelog entries:
  * Fix incorrect fix for xpm security problem.
    This patch fixed the buffer overflow but
    xpm coder output garbage, thanks to Adam Sjøgren
    (Closes: #773980).
  * Workarround "Imagemagick FTBFS on mips on mips-aql-* not on ball".
    Do not execute testsuite if FPU is not present. Security team
    want this bug fixed in order to ease it work, thanks
    to Ivo De Decker (Closes: #770009).

Author: Bastien Roucariès
Author Date: 2014-12-29 10:51:58 UTC

Import patches-unapplied version 8:6.8.9.9-5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6499995b9926b619fd0da8ba823dcb04a6de7d33

New changelog entries:
  * Fix incorrect fix for xpm security problem.
    This patch fixed the buffer overflow but
    xpm coder output garbage, thanks to Adam Sjøgren
    (Closes: #773980).
  * Workarround "Imagemagick FTBFS on mips on mips-aql-* not on ball".
    Do not execute testsuite if FPU is not present. Security team
    want this bug fixed in order to ease it work, thanks
    to Ivo De Decker (Closes: #770009).

Author: Colin Watson
Author Date: 2014-08-21 13:22:23 UTC

Import patches-unapplied version 8:6.7.7.10+dfsg-4ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 4aa19a6261d243ed1d85051c1b02b11f81f4b11a

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Make ufraw-batch (universe) a suggestion instead of a recommendation.
    - Depend on fftw3-dev as it's in main, not fftw-dev.
    - Make libmagickcore-dev depend on liblcms2-dev rather than liblcms-dev.
    - Build using dh-autoreconf.
    - Fix link of test cases.
  * Dropped changes:
    - Build-depend on libtiff5-dev instead of libtiff-dev (libtiff5-dev is
      the only libtiff-dev provider nowadays).
    - Configure with --disable-silent-rules (launchpad-buildd exports V=1
      for all builds now, which is equivalent).

Author: Colin Watson
Author Date: 2014-08-21 13:22:23 UTC

Import patches-unapplied version 8:6.7.7.10+dfsg-4ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 4aa19a6261d243ed1d85051c1b02b11f81f4b11a

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Make ufraw-batch (universe) a suggestion instead of a recommendation.
    - Depend on fftw3-dev as it's in main, not fftw-dev.
    - Make libmagickcore-dev depend on liblcms2-dev rather than liblcms-dev.
    - Build using dh-autoreconf.
    - Fix link of test cases.
  * Dropped changes:
    - Build-depend on libtiff5-dev instead of libtiff-dev (libtiff5-dev is
      the only libtiff-dev provider nowadays).
    - Configure with --disable-silent-rules (launchpad-buildd exports V=1
      for all builds now, which is equivalent).

Author: Colin Watson
Author Date: 2014-08-21 13:22:23 UTC

Import patches-unapplied version 8:6.7.7.10+dfsg-4ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 4aa19a6261d243ed1d85051c1b02b11f81f4b11a

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Make ufraw-batch (universe) a suggestion instead of a recommendation.
    - Depend on fftw3-dev as it's in main, not fftw-dev.
    - Make libmagickcore-dev depend on liblcms2-dev rather than liblcms-dev.
    - Build using dh-autoreconf.
    - Fix link of test cases.
  * Dropped changes:
    - Build-depend on libtiff5-dev instead of libtiff-dev (libtiff5-dev is
      the only libtiff-dev provider nowadays).
    - Configure with --disable-silent-rules (launchpad-buildd exports V=1
      for all builds now, which is equivalent).

Author: Salvatore Bonaccorso
Author Date: 2014-03-18 19:54:04 UTC

Import patches-unapplied version 8:6.6.0.4-3+squeeze4 to debian/squeeze

Imported using git-ubuntu import.

Changelog parent: 9439f5e3bde0bf09aea7e02f133e1fba1267f1b1

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Add 0006-CVE-2014-1947-Fix-buffer-overflow-when-handling-PSD-images.patch patch.
    CVE-2014-1947: Fix buffer overflow when handling PSD images.
    (Closes: #740250)
  * Add 0007-Prevent-buffer-overflow-in-messaging-system.patch patch.
    Add upstream patch to prevent buffer overflow in messaging system.

Author: Salvatore Bonaccorso
Author Date: 2014-03-18 19:54:04 UTC

Import patches-applied version 8:6.6.0.4-3+squeeze4 to applied/debian/squeeze

Imported using git-ubuntu import.

Changelog parent: d8fbb4ea22fc938f50bad3c3ca59de84468432a8
Unapplied parent: 50de2f1eaffbd970abd2a1a8ee1bd66590d59b50

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Add 0006-CVE-2014-1947-Fix-buffer-overflow-when-handling-PSD-images.patch patch.
    CVE-2014-1947: Fix buffer overflow when handling PSD images.
    (Closes: #740250)
  * Add 0007-Prevent-buffer-overflow-in-messaging-system.patch patch.
    Add upstream patch to prevent buffer overflow in messaging system.

Author: Marc Deslauriers
Author Date: 2014-03-06 16:19:36 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu3.1 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 83f5d4c4a247298aa944deb2ca92811eb9062703

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:19:36 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu3.1 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 83f5d4c4a247298aa944deb2ca92811eb9062703

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:20:37 UTC

Import patches-unapplied version 8:6.7.7.10-2ubuntu4.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 36c4abce5c75fb7b468dc44051b77b47119c5750

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:20:37 UTC

Import patches-unapplied version 8:6.7.7.10-2ubuntu4.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 36c4abce5c75fb7b468dc44051b77b47119c5750

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:20:37 UTC

Import patches-unapplied version 8:6.7.7.10-2ubuntu4.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 36c4abce5c75fb7b468dc44051b77b47119c5750

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:19:36 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu3.1 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 83f5d4c4a247298aa944deb2ca92811eb9062703

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:12:57 UTC

Import patches-unapplied version 8:6.7.7.10-6ubuntu3 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 75f2af4d2c022bc283cdd1ff76a56ee062d6b6ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2014-03-06 16:12:57 UTC

Import patches-unapplied version 8:6.7.7.10-6ubuntu3 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 75f2af4d2c022bc283cdd1ff76a56ee062d6b6ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via psd
    images processing rle decoding buffer overflow
    - debian/patches/CVE-2014-1958.patch: check lengths in coders/psd.c.
    - CVE-2014-1958
  * SECURITY UPDATE: denial of service via jpeg images with specially-
    crafted restart markers
    - debian/patches/CVE-2014-2030.patch: don't overflow layer_name in
      coders/psd.c.
    - CVE-2014-2030

Author: Marc Deslauriers
Author Date: 2013-09-09 18:58:28 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu2.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: 81b1ee2c92a566bfdaa9a021967f71cea18608ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution in GIF
    image comment decoding (LP: #1218248)
    - debian/patches/CVE-2013-4298.patch: properly handle comments in
      coders/gif.c.
    - CVE-2013-4298

Author: Marc Deslauriers
Author Date: 2013-09-09 18:58:28 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu2.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: 81b1ee2c92a566bfdaa9a021967f71cea18608ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution in GIF
    image comment decoding (LP: #1218248)
    - debian/patches/CVE-2013-4298.patch: properly handle comments in
      coders/gif.c.
    - CVE-2013-4298

Author: Marc Deslauriers
Author Date: 2013-09-09 18:58:28 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu2.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: 81b1ee2c92a566bfdaa9a021967f71cea18608ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution in GIF
    image comment decoding (LP: #1218248)
    - debian/patches/CVE-2013-4298.patch: properly handle comments in
      coders/gif.c.
    - CVE-2013-4298

Author: Marc Deslauriers
Author Date: 2013-09-09 18:49:08 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu3 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 81b1ee2c92a566bfdaa9a021967f71cea18608ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution in GIF
    image comment decoding (LP: #1218248)
    - debian/patches/CVE-2013-4298.patch: properly handle comments in
      coders/gif.c.
    - CVE-2013-4298

Author: Marc Deslauriers
Author Date: 2013-09-09 18:49:08 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu3 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 81b1ee2c92a566bfdaa9a021967f71cea18608ea

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution in GIF
    image comment decoding (LP: #1218248)
    - debian/patches/CVE-2013-4298.patch: properly handle comments in
      coders/gif.c.
    - CVE-2013-4298

Author: Philip Muškovac
Author Date: 2013-02-24 17:06:30 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu2 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: f6565cd078039c58563a30f51452c5e75af8287a

New changelog entries:
  * libmagickcore-dev should depend on liblcms2-dev not liblcms-dev
    (LP: #1132506)

Author: Philip Muškovac
Author Date: 2013-02-24 17:06:30 UTC

Import patches-unapplied version 8:6.7.7.10-5ubuntu2 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: f6565cd078039c58563a30f51452c5e75af8287a

New changelog entries:
  * libmagickcore-dev should depend on liblcms2-dev not liblcms-dev
    (LP: #1132506)

Author: Jamie Strandboge
Author Date: 2012-08-17 14:56:17 UTC

Import patches-unapplied version 7:6.6.2.6-1ubuntu4.2 to ubuntu/natty-security

Imported using git-ubuntu import.

Changelog parent: ac206647fa7804b6e2b0e1cc9c50f936fb51aab2

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:51:30 UTC

Import patches-unapplied version 8:6.6.0.4-3ubuntu1.2 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 891decd6e91c82cf0910a3a7c1013a3fab8d9a5a

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:51:30 UTC

Import patches-unapplied version 8:6.6.0.4-3ubuntu1.2 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 891decd6e91c82cf0910a3a7c1013a3fab8d9a5a

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:51:30 UTC

Import patches-unapplied version 8:6.6.0.4-3ubuntu1.2 to ubuntu/oneiric-security

Imported using git-ubuntu import.

Changelog parent: 891decd6e91c82cf0910a3a7c1013a3fab8d9a5a

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:59:07 UTC

Import patches-unapplied version 7:6.5.7.8-1ubuntu1.3 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 8da654ca159c7b5ec79542dd9023b01a7f5b293f

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:59:07 UTC

Import patches-unapplied version 7:6.5.7.8-1ubuntu1.3 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 8da654ca159c7b5ec79542dd9023b01a7f5b293f

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:59:07 UTC

Import patches-unapplied version 7:6.5.7.8-1ubuntu1.3 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 8da654ca159c7b5ec79542dd9023b01a7f5b293f

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437

Author: Jamie Strandboge
Author Date: 2012-08-17 14:56:17 UTC

Import patches-unapplied version 7:6.6.2.6-1ubuntu4.2 to ubuntu/natty-security

Imported using git-ubuntu import.

Changelog parent: ac206647fa7804b6e2b0e1cc9c50f936fb51aab2

New changelog entries:
  * SECURITY UPDATE: denial of service via large resource consumption
    - debian/patches/CVE-2012-3437.patch: always use correct size argument
      with libpng memory allocation
    - CVE-2012-3437