Re: [SECURITY] [DSA 3547-1] imagemagick security update

[Bjoern Nyjorden <brn@iinet.net.au>]

Hi Luciano & Crew,

I tried to apply this update at approximately 0422+0000 but Aptitude 
tells me that there are no updates available for Wheezy.

This is not the first time that I've received notification of a DSA, 
only to find that the update is not actually available until 1/2 -> 1 
day later.

In the future; is it possible to ensure; that the updated package is 
actually available on the http://security.debian.org/ server; prior to 
issuing the relevant DSA to the public?

Thank you all for your work on providing a free "as in freedom" 
operating system and associated software suite.

Yours sincerely,
Bjoern.

On 12/04/16 03:12, Luciano Bello wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> - -------------------------------------------------------------------------
> Debian Security Advisory DSA-3547-1                   security@debian.org
> https://www.debian.org/security/                            Luciano Bello
> April 11, 2016                        https://www.debian.org/security/faq
> - -------------------------------------------------------------------------
>
> Package        : imagemagick
> Debian Bug     : 811308
>
> Several vulnerabilities were discovered in Imagemagick, a program suite for
> image manipulation. This update fixes a large number of potential security
> problems such as null-pointer access and buffer-overflows that might lead
> to memory leaks or denial of service. Any of these security problems have
> a CVE number assigned.
>
> For the oldstable distribution (wheezy), this problem has been fixed
> in version 8:6.7.7.10-5+deb7u4.
>
> For the stable distribution (jessie), this problem was already fixed in
> version 8:6.8.9.9-5+deb8u1, in the last point release.
>
> We recommend that you upgrade your imagemagick packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBCAAGBQJXC/ZEAAoJEG7C3vaP/jd0yjAP/RJ3GHiMQDNYXsilOf/hBssm
> 6PRuYeH0XSjX37PsDzvOCt3A8POiOTJPOXPIU1Mmsqtd3B3VzXmwXIbfVW1dTSeT
> TrxlCfvFfdF16ckrzvcv136BIBAQTnQ8UG6z8o+8FSwVBvdjeo4Iim5gS6zepzhK
> xDokj924lCNbnwTiy2vQ0EgVW2EeZaa3ntRyldQ9ZC1Zo62hg6abNFBwdkB/giGx
> zqdMw9kXqvsiQiZqEVrMhfjAEpFZ3JceVMs80L2yBK5VuFVUirgPgBdH8ySZ8exW
> Fr1Yllu6G2nkzGKSiHGzRMd1lrzM3lV7LLrWq/jlQ7rI2ogEZ+4HHgQJLjpYJBuq
> KkTxWhIGsXjDOrQlZZ2xx4V8jn2naQCbYTXcB1LKvcktKsp9D2SFYUC6rWDA2k1J
> JD7tMTGq4JIQspP/bJ61mvtDp9v4z+9/Uwjt5S/eawdY/n9FT2Z71UlC226GxU8/
> IgbGw4wH3VCM3zsZsxyqINVFLT48AxbkW7bkxjJVpm7Ic2CcIwlewodkkdWMdSA2
> pj0lABOphaClhnNtHOQ2YwqYrPxOXjl5PeMoVIymKdx9h7eSWO6pLfGVuKljN2XK
> CeuR/5R0mubPrnrGB6AVEOjEYVRQ1YvGfEm1/ox7q51MZYdCT9+TTQEXOHGSoQGk
> aSM2D/rhnJ/VT0RkYlF4
> =a1rj
> -----END PGP SIGNATURE-----