imagemagick 8:6.9.10.14+dfsg-7ubuntu1 source package in Ubuntu

Changelog

imagemagick (8:6.9.10.14+dfsg-7ubuntu1) disco; urgency=medium

  * Sync with Debian. Remaining changes:
    - Drop dependency on libopenjp2-7-dev, which is needed for JPEG2000
      but is not in main. See bug 711061
    - demote libmagickcore-6.q16hdri-6-extra and libmagickcore-6.q16-6-extra
      Recommends on libjxr-tools to Suggests, as it is in universe.
  * Dropped changes:
    - Stop installing the Debian-specific .desktop for the display program.
      + 'imagemagick' is no longer installed by default for default Ubuntu
        so let's try dropping this change for now.
    - CVE-2017-15033.patch: patch applied in new release

imagemagick (8:6.9.10.14+dfsg-7) unstable; urgency=medium

  * Bug fix: "wrong Provides: libmagickcore-6.defaultquantum-dev,
    libmagickcore-dev (= 8:6.9.10.14+dfsg-5)", thanks to Helmut Grohne
    (Closes: #912833).

imagemagick (8:6.9.10.14+dfsg-6) unstable; urgency=high

  * Bug fix: "libmagickcore-6.q16-dev missing Depends:
    libmagickcore-6-arch-config", thanks to Helmut Grohne (Closes:
    #912679).

imagemagick (8:6.9.10.14+dfsg-5) unstable; urgency=high

  * Use jdupes instead of rdfind in order to avoid link to build dir
  * Bug fix: "Please remove me from uploaders", thanks to Vincent Fourmond
    (Closes: #897293).
  * Bump policy (no changes)

imagemagick (8:6.9.10.14+dfsg-4) unstable; urgency=medium

  * Use salsa in control
  * Add Pre-depends on dpkg for versioned provides
  * Bug fix: "make foreign dependencies on transitional -dev packages
    satisfiable", thanks to Helmut Grohne (Closes: #893030).

imagemagick (8:6.9.10.14+dfsg-3) unstable; urgency=medium

  * Fix FTBFS due to == in control.

imagemagick (8:6.9.10.14+dfsg-2) unstable; urgency=medium

  * Bug fix: "imagemagick binary-all FTBFS: rdfind: Command not found",
    thanks to Adrian Bunk (Closes: #912309).
  * Use ${binary:Version} instead of hard coded version for compat dev
    packages.

imagemagick (8:6.9.10.14+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Fix new privacy breach
  * Fix duplicate files in documentation
  * Fix security bugs:
    + CVE-2018-18544: Fix a memory leak in the function WriteMSLImage of
      coders/msl.c
    + CVE-2018-18024: Fix an infinite loop in the ReadBMPImage function of the
      coders/bmp.c file can cause a DOS via a crafted bmp file.
    + CVE-2018-18023: A heap-based buffer over-read in the SVGStripString
      function of coders/svg.c, which allows attackers to cause a denial
      of service via a crafted SVG image file.
    + CVE-2018-16645: Fix an excessive memory allocation issue in the functions
      ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c,
      which allows remote attackers to cause a denial of service via
      a crafted image file.
      (Closes: #910889)
    + CVE-2018-16644: Fix a missing check for length in the functions
      ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c,
      which allows remote attackers to cause a denial of service via
      a crafted image.
      (Closes: #910888)
    + CVE-2018-16413: Fix a heap-based buffer over-read in the
      MagickCore/quantum-private.h PushShortPixel function when called
      from the coders/psd.c ParseImageResourceBlocks function.
      (Closes: #910887)
    + CVE-2018-16323: Fix an information disclosure vulnerability that existed
      in ImageMagick when processing XBM images. An attacker could use this
      to expose sensitive information.
      (Closes: #907776)
    + CVE-2018-16412: Fix a heap-based buffer over-read in the coders/psd.c
      ParseImageResourceBlocks function.
    + CVE-2018-17965: Fix a memory leak vulnerability in WriteSGIImage
      in coders/sgi.c.
    + CVE-2018-17966: Fix a memory leak vulnerability in WritePDBImage
      in coders/pdb.c.
    + CVE-2018-17967: Fix a memory leak vulnerability in ReadBGRImage
      in coders/bgr.c.
    + CVE-2018-18016: Fix a memory leak vulnerability in WritePCXImage
      in coders/pcx.c.

 -- Jeremy Bicha <email address hidden>  Mon, 12 Nov 2018 23:51:56 -0500