-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 05 Feb 2019 20:44:14 +0000 Source: graphicsmagick Architecture: source Version: 1.4~hg15880-1 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changes: graphicsmagick (1.4~hg15880-1) unstable; urgency=high . * Mercurial snapshot, fixing the following security issues: - SetNexus(): Merge IsNexusInCore() implementation code into SetNexus() and add check for if cache_info->pixels is null, - CVE-2018-20185: BMP and DIB: Improve buffer size calculations to guard against arithmetic overflow. * Update Standards-Version to 4.3.0 . Checksums-Sha1: ab0803db76a078e9282329a93b1ce3e8d565d7d6 2855 graphicsmagick_1.4~hg15880-1.dsc b820d51eeaa5ed357f1d9571c01c529729d5b3c3 8560000 graphicsmagick_1.4~hg15880.orig.tar.xz 738c933511da92f118b13a93da8a4d84ef6edadb 142812 graphicsmagick_1.4~hg15880-1.debian.tar.xz e70a0f9eaed3253a72d5141e6f51bd976572cb7c 11923 graphicsmagick_1.4~hg15880-1_amd64.buildinfo Checksums-Sha256: e68b21b4514d594525e1ee24146d6e1a48b39c42ad25cafc88c7085fcd98de67 2855 graphicsmagick_1.4~hg15880-1.dsc 679ad90b79479e9aa856f8a38a544f0eb8231dc1bb7eeaac8aa4646701f41eaf 8560000 graphicsmagick_1.4~hg15880.orig.tar.xz fa5a0dcc6518febcb1b8a242829b45796d0c21037c621515c5b993c549a2600c 142812 graphicsmagick_1.4~hg15880-1.debian.tar.xz dbfba182ebd287299a95aed835aebc011fa48ae2f5d9a2c67bca2d2ada726a9f 11923 graphicsmagick_1.4~hg15880-1_amd64.buildinfo Files: 3fe917db07f3f2b409056f3ce61649ce 2855 graphics optional graphicsmagick_1.4~hg15880-1.dsc 71ea9cdf17d7e62ad6bbe8efb6c055d8 8560000 graphics optional graphicsmagick_1.4~hg15880.orig.tar.xz 780f9ca8c18e50ede5dc183ab73fe4a3 142812 graphics optional graphicsmagick_1.4~hg15880-1.debian.tar.xz c2efb3372993f29196e7a2ad59f4058c 11923 graphics optional graphicsmagick_1.4~hg15880-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAlxbGVcACgkQ3OMQ54ZM yL9kvA//U4pNeDUG8HLpT5PIiCSE/1poHAlWIXrPoZjIoUs3+KMiIp4SIOo5decr 460O0orUf+H4sQvpWMHUyNQIdUkapD85qD5MCBUWzhR8EeJNqJgYpsc2yQ6qw4PD +uDlgkKIPvSs9EfpeQ/FyHN6HiTkb2pStoUJzRKxulp2qBV+QnbYYdTAWQGWlunk 0fy7bbXHEMYeGtRV7d1rFjN209V0G3CXJVW4XlANmqQYEwzlKDpeT3l92fI/LKK3 KMA8eqqjK5AhsIL4hEJ60oGHhK9URVIcEoFnkJh3PrrGwbrIeDeG89x9AcqAAv4r 1cvw1894YNsOgOxRRY322qc8BtTOSMjwdj9leMDzFBW38OuVkjBuLH2xizkv1Vjs bjfwNqElZ3pBYsPSLbKJoswOcrdPDtK39RD12PwNFMuo5nDsOpOozJY4QFMy7Oti lPhiTb+qHnb9PbfwkuCK6+C/LkFe7yU+F1aBMrM9SzU7vJCcJGihc1usBe8ZI8uK mYM6aWyWruh4mjAWkMAvWAiojl/ioiiyb7bfFfwgr6uy/ScIhMAWi5BP8NqFuwoB buJKCdFRPKMvFiTfOhiwU8H8IUy/M9P/xvay7uplamZxmJf2dVhWbV/ZKWr/TfGC +JuoDKac+1gQC7yUUxrCEisOa0/FwWyjhhyI+4rOo/lNkI91KlQ= =U57m -----END PGP SIGNATURE-----