Re: Imagemagick fuzzing bug

[Alexander Cherepanov <cherepan () mccme ru>]

On 2014-12-25 00:32, Gynvael Coldwind wrote:
> > You are aware that there is graphicsmagick which shares lots of code
> > with im (it's an early fork)? It'd be nice to also report these issues
> > to them if they apply. (I also reported a couple of issues in both
> > im/gm lately and devs were always quick to fix things)
>
> Do you know if either im or gm backport fixes from each other?
> I fuzzed only im, so I've reported to im. I don't mind reporting to both in
> the future, but if they DO backport fixes, that would lead into collisions
> (i.e. two different fixes for one bug, makes merging harder).

I don't know about security fixes specifically but they have this in the 
FAQ:

http://www.graphicsmagick.org/FAQ.html#how-often-does-graphicsmagick-pick-up-new-code-from-imagemagick

GraphicsMagick never picks up new code from ImageMagick as distributed 
by ImageMagick Studio LLC. [...]

--
Alexander Cherepanov