From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:42394) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dr54c-0008AR-4o for guix-patches@gnu.org; Sun, 10 Sep 2017 12:27:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dr54Y-0005UI-6x for guix-patches@gnu.org; Sun, 10 Sep 2017 12:27:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:50878) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dr54Y-0005Tx-3e for guix-patches@gnu.org; Sun, 10 Sep 2017 12:27:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dr54X-0003Lr-Qv for guix-patches@gnu.org; Sun, 10 Sep 2017 12:27:01 -0400 Subject: [bug#28406] [PATCH] gnu: graphicsmagick: Fix CVE-2017-{11403,14103}. Resent-Message-ID: From: Kei Kebreau References: <20170910162144.32609-1-kkebreau@posteo.net> Date: Sun, 10 Sep 2017 12:25:49 -0400 In-Reply-To: (GNU bug Tracking System's message of "Sun, 10 Sep 2017 16:23:02 +0000") Message-ID: <87lglmcygi.fsf_-_@posteo.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 28406@debbugs.gnu.org --=-=-= Content-Type: text/plain It should be noted that AddressSanitizer still reports a memory leak with these fixes, even though the use-after-free problem seems to be solved. Thanks in advance, Kei --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEg7ZwOtzKO2lLzi2m5qXuPBlGeg0FAlm1Z44ACgkQ5qXuPBlG eg3GJBAAwMF/ueOALfrEBJSsNnKxmdTgDtrR6IB80opgPNFlCSofGUG/r6QbhrQA ztX1o9023q5fyKsrh0vNqvuslljKb6G42okS/d2UunRwf6fwc2Hx72TgL3cRp1hK Vs/7Y2a03is1pOriwI/O2Q0OBfFjNxTeiJ1aPFXU4HM5cucrTYH622jKoNCGVfDh /+YnhMFtKC3UZAiQjx3PUSrO7LKxEuWgAcWPljlp/Gw+s6HDhAQKxgUDVM6WL3/o 0C9bZ31UtRlLbYY/a+3IUIyvaEleRke42S8RkXeZa8U3fsK2SKZV7wABxYiioMpk 5TJx8/FqqK/to5ztVz3s68GSliv2tPqmTwpLLyMKV3t5kOMSGolBnYgcTn/G5uNo hqbFlvTE4mgbICS1IHTeDZXCmhyqjsH/J8hqr87PF2E7Ry+VyfSoaa2dtDQYuAnm mIL8KMRsIYsuSzcjZp4rS21qJAbvad0m2W5noJAH8tpoNrZ2wpTnCes1YOqia4KU GM70B8tW1wjnUvBCxJZEpquRSoH/hvVwBI3aKZkg97aLHp7xIXDVGNoF74qPaKEP NzSiB05wZRsdV50c8XAbuTTuTZrj6sGdvXaPCGd36OvgBNIHD87KIXPZiwfZweN1 zSFnSw1jULhJWNsiXQDQLH8h/Z/746ilpRM5UerrKDVmcaBDplU= =7aKw -----END PGP SIGNATURE----- --=-=-=--