Re: GraphicsMagick 1.1.8 release needed

On Fri, Sep 08, 2006 at 03:20:10PM -0500, Bob Friesenhahn wrote:
> On Fri, 8 Sep 2006, Albert Chin wrote:
> 
> > On Thu, Aug 17, 2006 at 10:42:35PM -0500, Bob Friesenhahn wrote:
> >> GraphicsMagick 1.1.7 was released quite some time ago (October, 2005)
> >> and there have been many fixes in the CVS version since then.  It
> >> appears that we need a 1.1.8 release.
> >>
> >> Please bring my attention to any important fixes which have yet to be
> >> applied to the 1.1 branch ASAP.
> >>
> >> I will be applying a png.c compilation fix to CVS shortly.
> >
> > Will it included all the security fixes from IM to-date?
> 
> I am not aware of any outstanding security issues related to PNG. 
> ImageMagick security issues do not necessarily exist in 
> GraphicsMagick.  Is there a security issue I should be aware of?

Do any of these affect GraphicsMagick?
  CVE-2005-4601
  CVE-2006-0082
  CVE-2006-2440
  CVE-2006-3743
  CVE-2006-3744

-- 
albert chin ([email protected])

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642