Legacy ImageMagick Discussions Archive

Hi,

I have a potential regression with security implication. Will send to usual adress. Please create ask for CVE (see https://cve.mitre.org/cve/request_id.html).

I have also a few other bug that I will post as answer here. When you have solved the CVE one and other bug could you made a release ASAP ?

Bastien

[mod note: We split your answers into separate topics, you can find the links below]

viewtopic.php?f=3&t=26400
viewtopic.php?f=3&t=26401
viewtopic.php?f=3&t=26402
viewtopic.php?f=3&t=26403
viewtopic.php?f=3&t=26404

Here's a fix for the bug you reported:

Code: Select all

513c513
<             (void) DeleteImageProfile(image,next);
---
>             (void) DeleteImageProfile(image,name);
1626c1626
<       (void) ReadProfileByte(&p,&length);
---
>       p++;

Thanks do you have a CVE ?

Looking for a user to volunteer to submit it to CVE. We're very busy this week with ImageMagick development. If no one volunteers, we'll try to find the time, perhaps early next week.

Legacy ImageMagick Discussions Archive

Potential DOS and a few other bug:

Potential DOS and a few other bug:

Re: Potential DOS and a few other bug:

Re: Potential DOS and a few other bug:

Re: Potential DOS and a few other bug: