Sufficient patch for CVE-2006-0082

Albert Chin <[email protected]> Wed, 1 Mar 2006 09:57:59 -0600
Newsgroups gmane.comp.video.graphicsmagick.core
Message-ID <[email protected]>
Is the attached patch ok for CVE-2006-0082? It is taken from Gentoo:
  http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml

-- 
albert chin ([email protected])

-- snip snip
Index: magick/image.c
===================================================================
RCS file: /GraphicsMagick/GraphicsMagick/magick/image.c,v
retrieving revision 1.1237
diff -u -3 -p -r1.1237 image.c
--- magick/image.c	8 Jun 2005 00:23:40 -0000	1.1237
+++ magick/image.c	1 Mar 2006 15:56:18 -0000
@@ -4561,7 +4561,7 @@ MagickExport MagickPassFail SetImageInfo
         Rectify multi-image file support.
         FIXME: Does not work!
       */
-      FormatString(filename,image_info->filename,0);
+      FormatString(filename,"%s",image_info->filename,0);
       if ((LocaleCompare(filename,image_info->filename) != 0) &&
           (strchr(filename,'%') == (char *) NULL))
         image_info->adjoin=False;


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642