[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
Thanks for the clarification! So comment #2 is not correct, I guess or I misinterpreted it. So imagemagick is not part of the Server LTS, which seems to me a bit odd (independently of whether the lucid imagemagick package is affected by this bug or not). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
See http://people.canonical.com/~ubuntu- security/cve/2013/CVE-2013-4298.html Lucid is EOL. Precise is listed as not affected. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
Has this been fixed for precise as well? What about lucid? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Branch linked: lp:ubuntu/saucy-proposed/imagemagick -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
This bug was fixed in the package imagemagick - 8:6.7.7.10-5ubuntu3 --- imagemagick (8:6.7.7.10-5ubuntu3) saucy; urgency=low * SECURITY UPDATE: denial of service and possible code execution in GIF image comment decoding (LP: #1218248) - debian/patches/CVE-2013-4298.patch: properly handle comments in coders/gif.c. - CVE-2013-4298 -- Marc Deslauriers marc.deslauri...@ubuntu.com Mon, 09 Sep 2013 14:49:08 -0400 ** Changed in: imagemagick (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-4298 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Changed in: imagemagick (Debian) Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Branch linked: lp:~noskcaj/ubuntu/saucy/imagemagick/lp1218248 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
I've attached a bzr branch ready for merging with the fix. ** Changed in: imagemagick (Ubuntu) Status: Triaged = In Progress ** Changed in: imagemagick (Ubuntu) Assignee: (unassigned) = Jackson Doak (noskcaj) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Bug watch added: Debian Bug tracker #721273 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 ** Also affects: imagemagick (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
The attachment Fix-gif-comments.patch seems to be a patch. If it isn't, please remove the patch flag from the attachment, remove the patch tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Changed in: imagemagick (Ubuntu) Status: New = Triaged ** Changed in: imagemagick (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.
** Changed in: imagemagick (Debian) Status: Unknown = Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1218248 Title: DoS: memory corruption while processing GIF comments. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs