-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 Jan 2021 18:02:36 +0100 Source: graphicsmagick Architecture: source Version: 1.4+really1.3.36+hg16442-1 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changes: graphicsmagick (1.4+really1.3.36+hg16442-1) unstable; urgency=high . * Mercurial snapshot, fixing the following security issues: - super_fgets_w() and super_fgets(): assure that returned pointer value is the same as reported via 'b', - ReadIdentityImage(): don't lose exception info if an image is not returned, - ReadMETAImage(): fix double-free if blob buffer was reallocated after being attached to blob, - ReadGIFImage(): fix memory leak of global_colormap if realloc of memory for comment fails. * Fix broken reading of planar RGB files. Checksums-Sha1: 903bfae5d0ca4b2614f3cfc5088a8037d369a32c 2952 graphicsmagick_1.4+really1.3.36+hg16442-1.dsc cd9bc810bc909c23571c018674b1b9da7b1e13e0 5592892 graphicsmagick_1.4+really1.3.36+hg16442.orig.tar.xz b6af2508b10a81cec4b7e2a530bb4eb1ba10c4c3 147428 graphicsmagick_1.4+really1.3.36+hg16442-1.debian.tar.xz Checksums-Sha256: dcc29522d96ac4b882aa482ff2dddad59f7db4dc2f1112b6e9ae7cf6f3b3ec19 2952 graphicsmagick_1.4+really1.3.36+hg16442-1.dsc d0e296eea7fcdc97f8c1f7cd076ad56b39a841cc4b0e9ef9d85e96dd8d791244 5592892 graphicsmagick_1.4+really1.3.36+hg16442.orig.tar.xz eb18d4b336202f3f9312b53f004ee2a59e5e2aabd2a7f81d73276f1da495f40e 147428 graphicsmagick_1.4+really1.3.36+hg16442-1.debian.tar.xz Files: cbf931e835f97cfd5193d99be92d769a 2952 graphics optional graphicsmagick_1.4+really1.3.36+hg16442-1.dsc d9ef70eb760049584115ee48b886efa6 5592892 graphics optional graphicsmagick_1.4+really1.3.36+hg16442.orig.tar.xz 6bf19dd8ab94c89080c4a15454bf1206 147428 graphics optional graphicsmagick_1.4+really1.3.36+hg16442-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAl/4llwACgkQ3OMQ54ZM yL9L+A/+I307pkd9MNncHqXyyFjrVY+tRAZxnBxgpE6/3rlZuWRNZj3MS+udhzmI 6z30CGb8AloLf8t0EdYAAV29u9x7KpP/UX5dfLQHokrcHWh/iCkFv7Z49OgvZtL1 8gjfQtubMNlKLeG1RK98M5AjhkEiajhBKoaF4c3vtAzkzAkHhBquqr2ghptmdYBm n4z3v9vY4sJnN3MQWneVpUJdrwI2e8bENFUgEWZEMzgj+6ve4PhBDx+TPqxLc5b4 PYArkiqBoyBnHn2Mt1kXGIW2+9TPiidXCJaGRKNX6S4WZ75Zk+HNz72l3G8JQWc4 enbR8VcflpSFqNkXRUAyUNL+XgULlZ0p4y54e2IWjd0C7HPrrbo+1GPTh48kEQA4 7HeGCGBIEfAkdlIz7W09KVrGDE5+wIBv0Yoa8rajhHjywGn3DLekUKyrgQYhBcjT GrDtweqfFWXJNA/Iaq5J3UxJiwJiOyDGs+tx/MwReWZFNL7w0MghlckY59ds0yze 4XaE6YYb22PaHbAXE/2OrIEyb0NH9SMlU1uiV3hoL4h6Ql8awzqXNJHGNhUnt7vo ytL7CSuXuhCNWGeIUnMd4zC4jhg2xIT3qGmb1UI+B0zXFHcpg9rIbJWveOnn2tiH 5Bgt6uMh+L7j4I0Grv7vKFQcYD/3G/EdJTVxeBhAHVCPE2slJjk= =NeXY -----END PGP SIGNATURE-----