Page MenuHomeSolus

Update imagemagick to 7.0.6-1 & review deps
ClosedPublic

Authored by kyrios123 on Jul 16 2017, 8:36 AM.
Tags
  • Restricted Project
Referenced Files
F11068977: D618.diff
Fri, Aug 11, 10:23 PM
F11010404: D618.id1336.diff
Thu, Aug 3, 2:56 AM
F10985767: D618.diff
Sun, Jul 23, 10:50 PM
F10983850: D618.id1335.diff
Sun, Jul 23, 3:52 PM
F10964567: D618.id1334.diff
Wed, Jul 19, 12:28 PM
F10693713: D618.id.diff
Apr 25 2023, 5:26 AM
Subscribers
None

Details

Summary

Software:

  • Implemented PNG eXIf chunk support.
  • Support new -auto-threshold option. OTSU and Triangle methods are currently supported. Look for the Kapur method in the next release.
  • Fixed numerous memory leaks reference.
  • Don't use variable float_t / double_t, bump SO reference.
  • Support DNG images with libraw delegate library.
  • Reject PNG file that is too small (under 60 bytes) to contain a valid image.
  • Reject JPEG file that is too small (under 107 bytes) to contain a valid image.
  • Reject JNG file that is too small (under 147 bytes) to contain a valid image.
  • CVE 2017-11310 Stop a memory leak in read_user_chunk_callback() reference.

Package:

  • remove inherited dependencies
  • add raw support

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

Usual quick checks with convert, compare and mogrify

Diff Detail

Repository
R1464 imagemagick
Branch
master
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

kyrios123 retitled this revision from Update imagemagick to 7.0.6-1 & review deps Software: - Implemented PNG eXIf chunk support. - Support new -auto-threshold option. OTSU and Triangle methods are currently supported. Look for the Kapur method in the next release. - Fixed numerous... to Update imagemagick to 7.0.6-1 & review deps.
kyrios123 edited the summary of this revision. (Show Details)

fix summary & title

kyrios123 edited the summary of this revision. (Show Details)

make sure CVE 2017-11310 appears in the description to flag this update as security fix

This revision is now accepted and ready to land.Jul 16 2017, 8:43 AM
This revision was automatically updated to reflect the committed changes.