-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Dec 2018 09:51:39 +0100 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.20-3+deb8u5 Distribution: jessie-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Closes: 916719 916721 916752 Changes: graphicsmagick (1.3.20-3+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2018-20184: heap-based buffer overflow in the WriteTGAImage function (tga.c) (closes: #916721). * CVE-2018-20185: heap-based buffer over-read in the ReadBMPImage function (bmp.c) (closes: #916719). * CVE-2018-20189: assertion failure in ReadDIBImage (coders/dib.c) (closes: #916752). Checksums-Sha1: a2e79241ff734a350550325f38d593ed74d166ea 2457 graphicsmagick_1.3.20-3+deb8u5.dsc 5a73dc055bcb47ad2d94e1b164a1f31c5443c388 209136 graphicsmagick_1.3.20-3+deb8u5.debian.tar.xz e7484046147bcc1928389c9371a4f7dda911e84d 796882 graphicsmagick_1.3.20-3+deb8u5_amd64.deb ae7dde337fe227e6049ac50fb9fc130e9cf0a7a3 1105084 libgraphicsmagick3_1.3.20-3+deb8u5_amd64.deb 31299e16ffeb1e5f274e0617713f04f601698ffa 1291966 libgraphicsmagick1-dev_1.3.20-3+deb8u5_amd64.deb 7a45223cd455965711adbe08f50d08299bd3e994 119420 libgraphicsmagick++3_1.3.20-3+deb8u5_amd64.deb 4f0ccfdc0ec1d9b3c1af3e5317c55bed834d853a 301640 libgraphicsmagick++1-dev_1.3.20-3+deb8u5_amd64.deb 0e4f5db71c9bb0324ee8788c378af0acf311ae3c 77496 libgraphics-magick-perl_1.3.20-3+deb8u5_amd64.deb c4f60cff58b3eefb315a41364f036dfc49758274 2221078 graphicsmagick-dbg_1.3.20-3+deb8u5_amd64.deb e224a5542c4352c875dfe8af4c041cd2fe793d28 29384 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u5_all.deb 3d7271b13154266f9bf69c5acd46ec4b775df888 32890 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u5_all.deb Checksums-Sha256: f7be7295571ea11835f37a2ee4d3501b668f37cb3e8fb53c9095c1b02089f138 2457 graphicsmagick_1.3.20-3+deb8u5.dsc aa6b05590d659a5b2101d4b60a82cd81917bece632b8b5930f18b884432ea643 209136 graphicsmagick_1.3.20-3+deb8u5.debian.tar.xz d415812b2298c8db9935be2e24a9296911e2b3032d5c98272ec4c89f3d12cdbd 796882 graphicsmagick_1.3.20-3+deb8u5_amd64.deb 59e97cd1be859b2b252c14bf2bb886cb35d9658a920ed2e99bf40f0ef634891e 1105084 libgraphicsmagick3_1.3.20-3+deb8u5_amd64.deb bd911840b1bc5895f46b306dd6db69f773ee28c70793dcaf2eb894183e1cd2ee 1291966 libgraphicsmagick1-dev_1.3.20-3+deb8u5_amd64.deb 8d555423f021ef07c46231a28e5a45199d810e17a3638b986d1a70a258622864 119420 libgraphicsmagick++3_1.3.20-3+deb8u5_amd64.deb c9f3bbcf6486d0e81f19a5b40cf309d8f205dd3bce3eef0df370b84156b932af 301640 libgraphicsmagick++1-dev_1.3.20-3+deb8u5_amd64.deb 4b9d32853f8bb32ca323703db7e683d28cf4157f58aebc9ce5f20615fea7b748 77496 libgraphics-magick-perl_1.3.20-3+deb8u5_amd64.deb 559081b11d304beb0e6358e8c0a31480a18ef78449830bad4984defe43eff629 2221078 graphicsmagick-dbg_1.3.20-3+deb8u5_amd64.deb 875e2db18feda255cc0b8aa92c82169dbb303f8a5b61980147c1fd5cbfdfd635 29384 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u5_all.deb 762ee306967cd656cdfc68c828ad88323e3eaf8d0dd205ffbd2b8176f3014ef9 32890 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u5_all.deb Files: a269221c3d6b3a2b591e695746d62a59 2457 graphics optional graphicsmagick_1.3.20-3+deb8u5.dsc 7631f32a154a910d9eaec6b7be0b7e1a 209136 graphics optional graphicsmagick_1.3.20-3+deb8u5.debian.tar.xz f24c7b2d9a23459d6e1fe73f8728d7ef 796882 graphics optional graphicsmagick_1.3.20-3+deb8u5_amd64.deb 73d3e50c98133a83ba941f54b1a43be8 1105084 libs optional libgraphicsmagick3_1.3.20-3+deb8u5_amd64.deb d5f48c3a5a4f19cb5c4557a590bf1bcf 1291966 libdevel optional libgraphicsmagick1-dev_1.3.20-3+deb8u5_amd64.deb 4e297730ae9d4de837d3cc265ee8891f 119420 libs optional libgraphicsmagick++3_1.3.20-3+deb8u5_amd64.deb bf41fa3068f68bbc0fbefcac14f61087 301640 libdevel optional libgraphicsmagick++1-dev_1.3.20-3+deb8u5_amd64.deb d6b5a928ceef21b5cb35f4b154d67feb 77496 perl optional libgraphics-magick-perl_1.3.20-3+deb8u5_amd64.deb 9668b9affe89b33bdf924d6ea6ccce25 2221078 debug extra graphicsmagick-dbg_1.3.20-3+deb8u5_amd64.deb 6176066bdf198521a7c753ced9681ab3 29384 graphics extra graphicsmagick-imagemagick-compat_1.3.20-3+deb8u5_all.deb 739d81c389ac4f997b48ba0047de0837 32890 graphics extra graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u5_all.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEUFZhdgIWqBhwqCvuZYVUZx9w0DQFAlwkhF8ACgkQZYVUZx9w 0DRCKwf9GxzTQ8qk0TPD4tW+aW0zDmpMoLV0iQO9a7gQOKsBSHDMjYbTCJ3n6MUr +2kENsmJe3lgpAsbVP/32RQe0tfIafRnEmuUVa9rnoSOMc8iDEfgxCX9++aZuWwk luefU6ut+3piIwJwf6L2JxtDeMUXQRWKL7jpkhX98rdM/3bjpmKYUjMxAHWFoM1I QIFrkSQlcyE8E2PeXQ8LcmWDNsqElalbv5885uRawtHuaM/tBhHCvvrQq36qSXV+ 40tM0YXyYXb1v/GA6Me5BVJydEvA3pN29gKSwimd4Rz+EshjCr/bYbjB021QuaUr 9RX9MADn5LSmWlMxZVjMwpHePjobQA== =2bYl -----END PGP SIGNATURE-----