imagemagick 7:6.2.4.5.dfsg1-0.14ubuntu0.2 source package in Ubuntu

Changelog

imagemagick (7:6.2.4.5.dfsg1-0.14ubuntu0.2) feisty-security; urgency=low

  * SECURITY UPDATE: multiple heap overflow vulnerabilities could lead
    to remote code execution.
  * Thanks to Jonathan Smith and Daniel Kobras for backported patches:
    - magick/memory.c,magick/memory_.h,magick/methods.h: Add new allocator
      wrapper AcquireQuantumMemory() to prevent potential integer overflows.
      Backport from upstream version 6.3.5.9.
    - magick/image.c: Backport new implementation of SetImageExtent() from
      upstream version 6.3.5.9.
    - coders/dcm.c,coders/xcf.c: Fix integer overflow in DCM and XCF coders.
      (CVE-2007-4985) Backport of upstream patch from version 6.3.5.9.
    - coders/dcm.c,coders/dib.c,coders/xbm.c,coders/xcf.c,coders/xwd.c:
      Fix multiple integer overflows in DCM, DIB, XBM, XCF, and XWD coders.
      (CVE-2007-4986 and CVE-2007-4988) Based on upstream patch from
      version 6.3.5.9.
    - magick/blob.c: Fix fencepost error in ReadBlobString()
      (CVE-2007-4987) Backport of upstream patch from version 6.3.5.9.
    - coders/dib.c: Ensure positive value for image rows and columns.
      Based on upstream patch from version 6.3.5.9.

 -- Kees Cook <email address hidden>   Tue, 02 Oct 2007 14:19:08 -0700