-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Feb 2020 19:02:36 +0000 Source: graphicsmagick Architecture: source Version: 1.4+really1.3.34+hg16230-1 Distribution: unstable Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changes: graphicsmagick (1.4+really1.3.34+hg16230-1) unstable; urgency=medium . * Mercurial snapshot, fixing the following security issues: - WritePICTImage(): Eliminating small buffer overrun when run-length encoding pixels, - WriteOneJNGImage(): Detect when JPEG encoder has failed, and throw exception, - DecodeImage(): Fix heap buffer over-reads, - DecodeImage(): Allocate extra scanline memory to allow small RLE overrun. * Update library symbols for this release. * Update Standards-Version to 4.5.0 . Checksums-Sha1: b10c51336cd0056446617a1118e199a7f49b91c5 2952 graphicsmagick_1.4+really1.3.34+hg16230-1.dsc 59edcf9b8989f02486544894a9600b254c593fff 5907396 graphicsmagick_1.4+really1.3.34+hg16230.orig.tar.xz 26f7397f913bdaf4b69af5662408ecb34602b3d7 145660 graphicsmagick_1.4+really1.3.34+hg16230-1.debian.tar.xz Checksums-Sha256: 51526f89355131aa5034683cd4424b1dfaf4d693cbedd38ecd6f101bf4429662 2952 graphicsmagick_1.4+really1.3.34+hg16230-1.dsc 326f9d2284bd16eed098fbc28595820cc8270a3f7059471e48db2b59e39d4d8d 5907396 graphicsmagick_1.4+really1.3.34+hg16230.orig.tar.xz d0338774ad753e67eb6799cbdcc8bf1bed1dc7239cbfd692771d27b328e16b8a 145660 graphicsmagick_1.4+really1.3.34+hg16230-1.debian.tar.xz Files: 3acf318eee0780d3551c7efbf65d0258 2952 graphics optional graphicsmagick_1.4+really1.3.34+hg16230-1.dsc b4a873589054c2f55e9f1c9971d94122 5907396 graphics optional graphicsmagick_1.4+really1.3.34+hg16230.orig.tar.xz 5ffc3ff70253d9c627bd105d87695d5d 145660 graphics optional graphicsmagick_1.4+really1.3.34+hg16230-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAl4+wOgACgkQ3OMQ54ZM yL9sGA//XdZcyBdYVXPpBbmv+nvDtBNLBQRR6HM9D2NvpQ1Y/RmDO4rsCh+ClOlZ v19z7Q/6NEY7swgyqlykkv79Zr3qW8ve1NsszWUEcTxHjQU20eSLXMN/W5Wfuasj lJZIxCw0ruwsqFd8otsh77KEQkkQmiUh5xVW+xTUCY5khtCi4K13aZN8FlXQShvm x4gS/pXTT2Aall+gUbOPZRv6fZKt3opP39adOcGcWS/RjaDCHSs9Us+QpGdCoz2f DJRjH45iyw0onrSa4WZOywmYnJPXCluch+a7nJVfymsVGpb5Rpuj8MMpKkXEPFY3 3MbiEPN0Zt9QwxuuqbGBee9joCIO9oMVZ7EP9h3TMqbfqd3rGYQhxK7Tvf9VHI0g 3r2O2N+dm7C23f2XO4js6zLflToPUDWD/1h27Y+JjoMoz0DNILryGC2nLzts/Xvw f2+MUBJUIixtSQE4eLUgvMGhWvu3m27ShxMHcvSznhF459NWv5Y3y4EkCfXqP5AW tG7EvjSb8VAv/4Uu8rxmhGKnJWDQkwqmBXk8ySeYMqzkzXt4CRIOZv7zOWtXwy4p l1WlcXg9TPOcAyTJcu7Gnt4wDfcMmg9+c86awATIOuktPotxqsyr2o2Bd3pv2ebF kzsqrqVi/ORdzrKVtRbO1cSv4cdAxd6GvCKWuy2rWCt4YoYyqRo= =KaX2 -----END PGP SIGNATURE-----