Re: GraphicsMagick 1.1.8 release needed
Bob Friesenhahn <[email protected]> Sat, 9 Sep 2006 17:20:01 -0500 (CDT)
| Newsgroups | gmane.comp.video.graphicsmagick.core |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 18 Aug 2006, Daniel Kobras wrote: > On Thu, Aug 17, 2006 at 10:42:35PM -0500, Bob Friesenhahn wrote: >> GraphicsMagick 1.1.7 was released quite some time ago (October, 2005) >> and there have been many fixes in the CVS version since then. It >> appears that we need a 1.1.8 release. >> >> Please bring my attention to any important fixes which have yet to be >> applied to the 1.1 branch ASAP. > > I'm currently testing a security fix for CVE-2006-4144 (heap overflow in > SGI coder) that should be considered for a new release: A fix which is partially derived from your patch has now been applied to GraphicsMagick CVS. I added additional assurance checks. The CVS version already contained several functionality fixes including for a security issue. Bob === Bob Friesenhahn [email protected], http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/ ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642