diff -Nru imagemagick-6.7.7.10/debian/changelog imagemagick-6.7.7.10/debian/changelog --- imagemagick-6.7.7.10/debian/changelog 2014-03-06 17:16:49.000000000 +0100 +++ imagemagick-6.7.7.10/debian/changelog 2016-05-12 16:36:32.000000000 +0200 @@ -1,3 +1,10 @@ +imagemagick (8:6.7.7.10-6ubuntu3.1) trusty-security; urgency=medium + + * Alter policy.xml to improve out-of-the-box security. + Addresses CVE-2016-3714. (LP: #1578398) + + -- Dariusz Gadomski Thu, 12 May 2016 16:36:05 +0200 + imagemagick (8:6.7.7.10-6ubuntu3) trusty; urgency=medium * SECURITY UPDATE: denial of service and possible code execution via psd diff -Nru imagemagick-6.7.7.10/debian/patches/CVE-2016-3714-workaround.patch imagemagick-6.7.7.10/debian/patches/CVE-2016-3714-workaround.patch --- imagemagick-6.7.7.10/debian/patches/CVE-2016-3714-workaround.patch 1970-01-01 01:00:00.000000000 +0100 +++ imagemagick-6.7.7.10/debian/patches/CVE-2016-3714-workaround.patch 2016-05-12 16:37:39.000000000 +0200 @@ -0,0 +1,29 @@ +Description: Alter the policy.xml to address CVE-2016–3714 + Altering policy.xml to disable the vulnerable ImageMagick + coders. + . + imagemagick (8:6.7.7.10-6ubuntu3.1) trusty-security; urgency=medium + . + * Alter policy.xml to improve out-of-the-box security. + Addresses CVE-2016-3714. (LP: #1578398) +Author: Dariusz Gadomski +Bug-Ubuntu: https://bugs.launchpad.net/bugs/1578398 +Origin: other, https://imagetragick.com/ + +--- imagemagick-6.7.7.10.orig/config/policy.xml ++++ imagemagick-6.7.7.10/config/policy.xml +@@ -55,4 +55,14 @@ + + + ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ + diff -Nru imagemagick-6.7.7.10/debian/patches/series imagemagick-6.7.7.10/debian/patches/series --- imagemagick-6.7.7.10/debian/patches/series 2014-03-06 17:12:34.000000000 +0100 +++ imagemagick-6.7.7.10/debian/patches/series 2016-05-16 12:26:40.000000000 +0200 @@ -11,3 +11,4 @@ freetype.diff CVE-2014-1958.patch CVE-2014-2030.patch +CVE-2016-3714-workaround.patch