Debian
imagemagick package

  1. Bug #27952
  2. Comment #13

Comment 13 for bug 27952

Revision history for this message
In , Daniel Kobras (kobras) wrote : Re: Bug#345876: imagemagick: New format string vulnerability in SetImageInfo().

On Mon, Jan 09, 2006 at 10:18:13AM -0500, Matthias Clasen wrote:
> Ah, got it now. Does this look more complete ?

Yes, but there are still a few more places to fix. The attached patch
for 6.2.4.5 should be fairly complete, apart from a few odd places in
coders/, but those fall more into the scope of CVE-2005-4601. Mind,
though, that I'm still testing the fix, so some polishing might be
needed still.

Regards,

Daniel.