-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 06 Dec 2020 10:37:34 +0100 Source: graphicsmagick Architecture: source Version: 1.4+really1.3.35+hg16394-1 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changes: graphicsmagick (1.4+really1.3.35+hg16394-1) unstable; urgency=high . * Mercurial snapshot, fixing the following security issues: - DrawImage(): Verify that affine scaling factors are not zero - fixing divide-by-zero in InverseAffineMatrix() , - DrawPolygonPrimitive(): Thread error status check was at wrong scope, resulting in code executing when it should have quit, - DrawImage(): Use unique image attribute space for MVG symbols - fixing stack-overflow in DrawImage() and integer-overflow in DrawPolygonPrimitive() . Checksums-Sha1: 699ab578d8116b57d9312ee986292ae9ca65f89e 2952 graphicsmagick_1.4+really1.3.35+hg16394-1.dsc 780bafd7b9228c5f10054605dfa669e739fef666 5572820 graphicsmagick_1.4+really1.3.35+hg16394.orig.tar.xz 5adf03d856bc5af6ff27bdd75109a7700ba1749b 146968 graphicsmagick_1.4+really1.3.35+hg16394-1.debian.tar.xz Checksums-Sha256: 0fa297987bc0d093ad31745c343c61afc0e13acf540dff9097999ef2b1957bab 2952 graphicsmagick_1.4+really1.3.35+hg16394-1.dsc b391b594b0dad47cc71de3a2ba80c8872cb740a941e69d05d1b67b1de7f29e50 5572820 graphicsmagick_1.4+really1.3.35+hg16394.orig.tar.xz 08e33aaf0088ac9421a566140c06cc529b51cb8f55622b82b14f8c3716d163fc 146968 graphicsmagick_1.4+really1.3.35+hg16394-1.debian.tar.xz Files: 22d55c3bb24bd55b2609e64a7d2fd6e7 2952 graphics optional graphicsmagick_1.4+really1.3.35+hg16394-1.dsc 068d5e27682f992948caa6fbe6465768 5572820 graphics optional graphicsmagick_1.4+really1.3.35+hg16394.orig.tar.xz 1fe435fc9f985e234d5c3af054d7a231 146968 graphics optional graphicsmagick_1.4+really1.3.35+hg16394-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAl/MtGcACgkQ3OMQ54ZM yL/CQA//Vln3YJobSxIDRVpL39qGdSqRMUA+U5tTu+v/qiAXHCs2s/c26U01v/XS RbILcoWr3YIJfzCJ6m+4Mud08iaDICUJbxxwuZ5i2uv2wDwsKn7+f+b0zoSYS0BQ U5fYRIkoGt9zZYiHoNkf396Vp0sD7AtoAKOQ6DiP3kG+SkNh78p9QgftHO0lkQKC AIPnLmNqHhV96VYiOmj+yHx4KI/IbWbue1h7muvTxF3Tl6JYDo7GrOv5V7t2/UxD R2OawMuNQgTO0KO4Zvh7MPqGoT/9asST3lPebP4G0DYKfQMnYkDEx8q0ejpSdrRp oGLcQDqTwfxJ4v6HH26pDWCaGgg5UTkoN0Sop577ay1hDXGF9c6uOvIo/9Ld73Lw xp6xgnIegCQ7YwKiuxsH/0Rmug2RDL1M3KuQzcVI5AH7+MY1A7tBXYXhvzYY2m8D M8rYPq/QznrkFJqWT/bvAqdJ37LT346rFh/PYCMBbk+1ZCd7nX/bJb75nyNQYIeG oiuINCrVse/XH7pvFDJQvWbyigMTGw6fMWIXThkuV9BcwJosGWHS2p5MW+e0I/ki Srzr5sXd+xM5/ydtd/6CFRKTHCqCwXjnCbZRnpEHi3AiC7FnbNz3rfWMeI8nQxCY tN49OJPyzh3MPqJTmBzFgE6ytaK2C5IUp5p3gcmgvSKp2Ll6EWU= =LOxN -----END PGP SIGNATURE-----