-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 May 2019 08:01:07 +0200 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.20-3+deb8u7 Distribution: jessie-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Changes: graphicsmagick (1.3.20-3+deb8u7) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * CVE-2019-11506: missing error handling primitives causes heap-based buffer overflow in WriteMATLABImage (coders/mat.c) when processing crafted Matlab matrix data. * CVE-2019-11505: heap-based buffer overflow in WritePDBImage (coders/pdb.c) when processing crafted PDB images. * CVE-2019-11474: floating-point exception in coders/xwd.c when processing crafted XWD images. * CVE-2019-11473: out-of-bounds read in coders/xwd.c when processing crafted XWD images. * Fix GCC warnings introduced in CVE-2017-10799.patch and CVE-2019-11009.patch (previous upload). Checksums-Sha1: acb4fedf2c97b819e7f979ff760f589d693fa008 2489 graphicsmagick_1.3.20-3+deb8u7.dsc 73042eee48e17d074f68f6f70fc81b221481255a 5206616 graphicsmagick_1.3.20.orig.tar.xz baa53df5e7e78305b970d06642903b78ad9f72c6 217924 graphicsmagick_1.3.20-3+deb8u7.debian.tar.xz e386525cc2d84e464c14ce57e3bb078508a9913f 796812 graphicsmagick_1.3.20-3+deb8u7_amd64.deb eeff8d325341a308a8abdc9beeff5a9ce9b711dd 1107448 libgraphicsmagick3_1.3.20-3+deb8u7_amd64.deb aace3f998800275496d9ce03e2526a47533d6176 1293268 libgraphicsmagick1-dev_1.3.20-3+deb8u7_amd64.deb acaa7cea9c59b4c543db25fac776edef25e37486 120200 libgraphicsmagick++3_1.3.20-3+deb8u7_amd64.deb 2f52e0ecc8afeab22aa16541bdce2ce9148baeeb 301176 libgraphicsmagick++1-dev_1.3.20-3+deb8u7_amd64.deb 6a6fb988e787e05fc762f3d3cb3362c82926ef56 77794 libgraphics-magick-perl_1.3.20-3+deb8u7_amd64.deb 8136218704c57d03372d770858a72ae1ff7a22ba 2224868 graphicsmagick-dbg_1.3.20-3+deb8u7_amd64.deb 1cdb7f8a94c5acad9d57977ad7504191368da60e 29854 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u7_all.deb 1e5b2a31b47b40d5477dfbb7650920ed2ca8a2b7 33260 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u7_all.deb Checksums-Sha256: 41224f6bc6fdf2f94b0597b0002274c2aea4d4b96c08106aee56964259d4db6b 2489 graphicsmagick_1.3.20-3+deb8u7.dsc 35fa21da4c1479e08da8351c5b1e363adaca803a0064cfc83084363adce387c9 5206616 graphicsmagick_1.3.20.orig.tar.xz 7b004cc5f2ba0d78ca95170c2beaafbdb74729b44302045775c4a8c8f7091e33 217924 graphicsmagick_1.3.20-3+deb8u7.debian.tar.xz d0ee2db79ecd21a0209ccdb9512cf6d156166f2dbaad51046f2e178d49a5c9fe 796812 graphicsmagick_1.3.20-3+deb8u7_amd64.deb 45bbaf27c6d934150653e0a3fb25a3a84ad3e49c591f43e6831a8ac63cbc4991 1107448 libgraphicsmagick3_1.3.20-3+deb8u7_amd64.deb 933e8a542569ab2d959f3310edc9bb2a17f698ae2f89ea351efa6eea9fb380d6 1293268 libgraphicsmagick1-dev_1.3.20-3+deb8u7_amd64.deb de5775238c3237d3d213796d71b4c6c385251b9c06f8d3bad4c072809d9b6757 120200 libgraphicsmagick++3_1.3.20-3+deb8u7_amd64.deb 5b0f996a32fc2109d515d2cebf7fe9e63bc0f9ac385179eb639e0f8fe268fdb7 301176 libgraphicsmagick++1-dev_1.3.20-3+deb8u7_amd64.deb a54e7f29bdb1304b18207a64c21bf82271831368084ea904c9723f6134e93589 77794 libgraphics-magick-perl_1.3.20-3+deb8u7_amd64.deb c36b307f6436591ab00e91e291c8c739c8697dbd14111e678a3ba06e2a892a7c 2224868 graphicsmagick-dbg_1.3.20-3+deb8u7_amd64.deb 45461f62d52ac6f39b1b3695696aaba3d1e75923248fcf9735b63a6898631f37 29854 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u7_all.deb 240c08e7cd07c57a9f62de4dc373b5fa3f64ce9acb327492a034b558d53fbed0 33260 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u7_all.deb Files: a042fe17f2ec44202b97a8ea3fe3031c 2489 graphics optional graphicsmagick_1.3.20-3+deb8u7.dsc 5bb456e3466026ada6f12cc53c9776dc 5206616 graphics optional graphicsmagick_1.3.20.orig.tar.xz b7afe36bdfa1fa1a5cd3bc83c6a15f05 217924 graphics optional graphicsmagick_1.3.20-3+deb8u7.debian.tar.xz 213732a9b2ba713ec6df7077ca5c5881 796812 graphics optional graphicsmagick_1.3.20-3+deb8u7_amd64.deb caacedc7aa3918a216b917a161ad5910 1107448 libs optional libgraphicsmagick3_1.3.20-3+deb8u7_amd64.deb c70f9aeb6bdc07ec7664c75fae4cad6e 1293268 libdevel optional libgraphicsmagick1-dev_1.3.20-3+deb8u7_amd64.deb d8965de0e2571b1f625b25bcc20b3155 120200 libs optional libgraphicsmagick++3_1.3.20-3+deb8u7_amd64.deb e1a9be76ae7800dd5e6922fda5a26861 301176 libdevel optional libgraphicsmagick++1-dev_1.3.20-3+deb8u7_amd64.deb cb4643f18cdb41066ec33ba18c299416 77794 perl optional libgraphics-magick-perl_1.3.20-3+deb8u7_amd64.deb 3acc7bde038bb9efd5a18bc35f0813f4 2224868 debug extra graphicsmagick-dbg_1.3.20-3+deb8u7_amd64.deb 0d7cec23da0dba81ffbf673513b54161 29854 graphics extra graphicsmagick-imagemagick-compat_1.3.20-3+deb8u7_all.deb 750be61ffdbfaea45896537ff808e7c2 33260 graphics extra graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u7_all.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEUFZhdgIWqBhwqCvuZYVUZx9w0DQFAlziT84ACgkQZYVUZx9w 0DR8owf/f8LJaDJoQGy7qVODuRpEu/qEx8Jkvsk/Wht8vv+qZ01M5/nMHoa8Tb+J isuA7C/MSUEilk9kP+DITVwnfeQ0EtD3SQfRJcxgDU9m3rzFjusKVblXlfbzrQLj OxXhVb2I5ciDZ4O5R4dtDm16Z3MAnjHtp5FHVTWxGRLnSEHK++sGqZBLn9AgySn0 bdkcwhtktfrZMPmiXuSmLyt1s3GueHB6gmbNdnJ4ws+cm9cUeV/e0pw1hXZF9Ta2 2yW7MBxtSgrdj6jcbav+dbe+dgeWapC4IgfTPTwH4+3Nl+LlyDlrzqiVwWHD0kat 91bcEMFihtzj5jmj+E868HtYKOtwoQ== =7xIf -----END PGP SIGNATURE-----