Comment 1 for bug 1797647

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package imagemagick - 8:6.9.7.4+dfsg-16ubuntu6.7

---------------
imagemagick (8:6.9.7.4+dfsg-16ubuntu6.7) bionic-security; urgency=medium

  [ Steve Beattie ]
  * SECURITY UPDATE: previous update did not correctly block
    encapsulated postscript (EPS) documents by default (LP: #1797647)
    - debian/patches/200-disable-ghostscript-formats.patch: correctly
      disable EPS files by default in policy.xml

  [ Marc Deslauriers ]
  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-*.patch: backport multiple upstream commits.
    - CVE-2017-12805, CVE-2017-12806, CVE-2018-16412, CVE-2018-16413,
      CVE-2018-17965, CVE-2018-17966, CVE-2018-18016, CVE-2018-18024,
      CVE-2018-18025, CVE-2018-18544, CVE-2018-20467, CVE-2019-7175,
      CVE-2019-7395, CVE-2019-7396, CVE-2019-7397, CVE-2019-7398,
      CVE-2019-9956, CVE-2019-10131, CVE-2019-10650, CVE-2019-11470,
      CVE-2019-11472, CVE-2019-11597, CVE-2019-11598
   * debian/tests/rose-*: remove pdf tests.

 -- Marc Deslauriers <email address hidden> Thu, 20 Jun 2019 13:38:05 -0400