-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Jan 2020 19:03:02 +0100 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.20-3+deb8u8 Distribution: jessie-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Changes: graphicsmagick (1.3.20-3+deb8u8) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2019-19953 heap-based buffer over-read in the function EncodeImage * CVE-2019-19951 heap-based buffer overflow in the function ImportRLEPixels * CVE-2019-19950 use-after-free in ThrowException and ThrowLoggedException Checksums-Sha1: ed816411e31c5a99b18ef2d4c14462c6f7f407e2 2993 graphicsmagick_1.3.20-3+deb8u8.dsc 73042eee48e17d074f68f6f70fc81b221481255a 5206616 graphicsmagick_1.3.20.orig.tar.xz d7ad6b8f51d664a6453063412613857bc4d3e10a 220444 graphicsmagick_1.3.20-3+deb8u8.debian.tar.xz 89bd53ec7df6256c7671ee91bbadb5cd467e199c 796320 graphicsmagick_1.3.20-3+deb8u8_amd64.deb b3c5432e905652e35c4671c687760d558fb21799 1107792 libgraphicsmagick3_1.3.20-3+deb8u8_amd64.deb 88517b7d70f9807e89334d603e461c6cecce3e57 1295484 libgraphicsmagick1-dev_1.3.20-3+deb8u8_amd64.deb 76a336f1543a21126397a1220261d4b8c4c7696a 120294 libgraphicsmagick++3_1.3.20-3+deb8u8_amd64.deb ead345882f08ebd3f037024456536e3024c7d6f5 302458 libgraphicsmagick++1-dev_1.3.20-3+deb8u8_amd64.deb 32176b0e59a616f1ebb485e793d53ff952a31d4a 77824 libgraphics-magick-perl_1.3.20-3+deb8u8_amd64.deb cefc11a40398a28ab5023e05b4bb7b8eceea1152 2226428 graphicsmagick-dbg_1.3.20-3+deb8u8_amd64.deb 710b84e7e7014a0ba5e88e0952cfc197401d2f94 29976 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u8_all.deb d27faf5784565a7b3d0ace7c871b09e21624e198 33430 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u8_all.deb Checksums-Sha256: 112c3288aee26363dd61adfb416309b24e6d80bde7453ffe8ce0848104ebe43d 2993 graphicsmagick_1.3.20-3+deb8u8.dsc 35fa21da4c1479e08da8351c5b1e363adaca803a0064cfc83084363adce387c9 5206616 graphicsmagick_1.3.20.orig.tar.xz a946cdafc8ad21721dd5c25e9cbabe359c74e3e272fd0aa9cddcc24efeca1d89 220444 graphicsmagick_1.3.20-3+deb8u8.debian.tar.xz 0c53a3a36802d0d058d9a00a8b539e44ffe0485799bd3ac036d13580c2d2fad6 796320 graphicsmagick_1.3.20-3+deb8u8_amd64.deb a8653dbd3e73be8975f4ac2a06381327131c74c9c54754ca2d34d8b408705815 1107792 libgraphicsmagick3_1.3.20-3+deb8u8_amd64.deb a773d65516ffc80b3fa5bec3bc2e556340ff29fedd81859858a2bb53005c4dfa 1295484 libgraphicsmagick1-dev_1.3.20-3+deb8u8_amd64.deb a98e6c8ed0d165fd30cce2f6bbebbaf1de7cd54fa296d4be0cd0636cd39da4e0 120294 libgraphicsmagick++3_1.3.20-3+deb8u8_amd64.deb 32b007797ac42e467b3a6d36042b12eda472842a2e829b4f8f54f4818c212117 302458 libgraphicsmagick++1-dev_1.3.20-3+deb8u8_amd64.deb 7486d5fc54a53d64a33f4e31766e0d60399525f19a344282c5063dc4d75b1682 77824 libgraphics-magick-perl_1.3.20-3+deb8u8_amd64.deb b51f342e445804f43f0ff08b6650c251d9ff9f82b514d5bf0b1e391da6659acd 2226428 graphicsmagick-dbg_1.3.20-3+deb8u8_amd64.deb a7e1ddf502402262fbf295652fe4280d35a4169bf98bc2e7c097f148a0655d1e 29976 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u8_all.deb 9a856da6b14d6c09398963bce650af7579ebc0740fb89e06551177fcac9e35ab 33430 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u8_all.deb Files: c891a6dfb7872e0d9227040f82cbcae4 2993 graphics optional graphicsmagick_1.3.20-3+deb8u8.dsc 5bb456e3466026ada6f12cc53c9776dc 5206616 graphics optional graphicsmagick_1.3.20.orig.tar.xz c9cc838190cacecd87e7e130d4108cbf 220444 graphics optional graphicsmagick_1.3.20-3+deb8u8.debian.tar.xz 3d97d8a9017f3dd9de4ed9892f7e2c1e 796320 graphics optional graphicsmagick_1.3.20-3+deb8u8_amd64.deb 191170054d2d4d91a635d9a6382686ec 1107792 libs optional libgraphicsmagick3_1.3.20-3+deb8u8_amd64.deb 755cd49e1e68a2166c819685a431fed4 1295484 libdevel optional libgraphicsmagick1-dev_1.3.20-3+deb8u8_amd64.deb 9b60711dba9be785e25a66dd94bd1f94 120294 libs optional libgraphicsmagick++3_1.3.20-3+deb8u8_amd64.deb 87ed0ac535cc65eee1b35774dbac1ddf 302458 libdevel optional libgraphicsmagick++1-dev_1.3.20-3+deb8u8_amd64.deb 357e0cbb8dc2905c14c05c01eb891a01 77824 perl optional libgraphics-magick-perl_1.3.20-3+deb8u8_amd64.deb a8cdc4df909b61e39f3cf2cc3191667b 2226428 debug extra graphicsmagick-dbg_1.3.20-3+deb8u8_amd64.deb 5cad6e6a230cc488a96161afbb798999 29976 graphics extra graphicsmagick-imagemagick-compat_1.3.20-3+deb8u8_all.deb cdf6b012943392566e05824d5c3f21b0 33430 graphics extra graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u8_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl4x1shfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR+efEACddit+PmxB28OO/WqXSKYV+HE9u9cL vB3tGDd35Y8WYxZwNEVwtZ27FttBEnezncYrx/NDjca2j8pNaJ0pKgtzahtjnsBI 3Tiga/2+/y5ilipAmGgVoFoZvmOZ6i9TiC5EoeE2qrtsf+fyhxQxfX5TzlDep6U2 v6z3LEdvF+BHOq+B1NtoR/JUH39JFtgN9PSqA9qi4KXyVNxz9G1QVduGQuRYFKNW zLjphH7LGK3BTq0uP5p4of/ehGZi0OgnyCJaciZB/MOy9LcJGIarHO8v6ei8Asa2 96iHHUuvhngnui8mwlI2U9n0BrHGJHyowLX89+8ZILr4snq2nGXo0Ak6tid+l5PX 3yAF8biAMOmJ8YQ4oiBEqqk9ZwO5skuyLbvI3jD59+M9Lltw9vL3uY0KXYwT3mU7 11HmhMRbTFl33uyFA/EjIboL+TcNWOCgxjEc5m/0NMpuYhHpcIGSFYLi/FoqLWXW Eaeb9HYb/zcPZ86nuVA0j4gWB6IRGvrC/+lTvUHcjMpjPUGgHhx1qIdJ1Mul8hyr kL/Q0GdCoJoAxsNhC0fqJQCWgXdPqm8ji8kipf37qx+0UE3EBMSvWneYtRBLVnZ2 GNQL6SQxKoE4Qd7qkmVx+ndpbR5vLHND7oP3R/aHLhEwHHbe+rOd7We8qc+z/D4z /fWhMiaxDTTIMQ== =Ma0F -----END PGP SIGNATURE-----