Re: Gentoo ImageMagick BMP image buffer overflow

Albert Chin wrote:
> 
> Is GM also vulnerable:
>   http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml

Yes.  It has been fixed in the GM CVS as of August 24 but not in
the tar distributions for GM-1.1.3 or earlier.

Incidentally the decoders for AVI and DIB are also vulnerable and
were fixed at the same time in IM and GM.

Glenn


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM. 
Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php