Where is change log?

[mrmikel]

Image Magick is used in calibre and it has not been updated in calibre. The developer wants to know if there are security issues which would require this. It trips Secunia PSI 2.0, so I want to be able tell the developer to update or Secunia there is no security issue.

[fmw42]

http://www.imagemagick.org/script/changelog.php

[mrmikel]

Then there are no security issues after 6.5.2-8, which is older than the version that calibre uses?

[fmw42]

Then there are no security issues after 6.5.2-8, which is older than the version that calibre uses?

That is beyond my understanding. You need to hear back from Magick for further details.

[magick]

Security issues are tagged in the ChangeLog by CVE #. For example, @ http://www.imagemagick.org/script/changelog.php:

2012-01-30 6.7.5-1 Cristy <quetzlzacatenango@image...>
Prevent overflow when casting short int to size_t when parsing a maliciously crafted image with an IFD whose all IOP tags' value offsets point to the beginning of the IFD itself [CVE-2012-0247].