Control: tags -1 + moreinfo
On Thu, 2016-01-14 at 22:33 +0100, Vincent Fourmond wrote:
> The imagemagick maintainers (mostly Bastien) have prepared a new
> version of imagemagick for stable that fixes a series of minor
> security issues that the security team did not deem worthy of an
> upload to stable-security. Can we upload the following package ? Here
> is the changelog:
While I've not checked each fix individually (mostly due to the lack of
Debian bugs referenced), at least these changes:
> - Fix an integer overflow that can lead to a buffer overrun
> in the icon parsing code (LP: #1459747, closes: #806441)
> - Fix an integer overflow that can lead to a double free in
> pict parsing (LP: #1448803, closes: #806441).
claim not to be fixed in unstable according to the BTS metadata, which
is a pre-requisite for fixing them in stable. Please could you clarify
the status of those and the other fixes.