-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 28 Feb 2021 23:26:56 +0100 Source: graphicsmagick Architecture: source Version: 1.4+really1.3.36+hg16481-1 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changes: graphicsmagick (1.4+really1.3.36+hg16481-1) unstable; urgency=high . * Mercurial snapshot, fixing the following security issues: - ProcessStyleClassDefs(): fix non-terminal loop caused by a self-referential list which results in huge memory usage, - MSLCDataBlock(): fix leak of value from xmlNewCDataBlock(), - ProcessStyleClassDefs(): fix memory leak upon malformed class name list, - ProcessStyleClassDefs(): fix non-terminal loop and huge memory allocation caused by self-referential list, - SVGReference(): fix memory leak when parser node is null, - MSLStartElement(): fix assertion in TranslateText() when there are no attributes available. Checksums-Sha1: 8ca1d76b0ba011837d0bb52e53400b381c495ed6 2916 graphicsmagick_1.4+really1.3.36+hg16481-1.dsc 2dcddc59487a7acc31dbda27e2abf28025f88b90 5597244 graphicsmagick_1.4+really1.3.36+hg16481.orig.tar.xz 2daf5f80382a156c2f17f7c7dd40d762da982fa1 148148 graphicsmagick_1.4+really1.3.36+hg16481-1.debian.tar.xz Checksums-Sha256: ccc5a5a0b4dccbd8205a3373b5d27e3f6e751a64546ae62c9ea7487c02dd2889 2916 graphicsmagick_1.4+really1.3.36+hg16481-1.dsc 249ec51169a1688007456fde5ea694c8da0924560412dc5f39421215e19f2c02 5597244 graphicsmagick_1.4+really1.3.36+hg16481.orig.tar.xz 66fd1d4e9ab08355fb80d1ecf0f89c4b35952a7e1c65845921fb3b33db2753cb 148148 graphicsmagick_1.4+really1.3.36+hg16481-1.debian.tar.xz Files: 597ff0bb95889d15143e98b86cf5e1b1 2916 graphics optional graphicsmagick_1.4+really1.3.36+hg16481-1.dsc 771cecf554d4af9e5dc34cdbbdc579a9 5597244 graphics optional graphicsmagick_1.4+really1.3.36+hg16481.orig.tar.xz 609e5656ac6f3fba5e42213eea26cb58 148148 graphics optional graphicsmagick_1.4+really1.3.36+hg16481-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmA8HlQACgkQ3OMQ54ZM yL/P1Q/9F1zqF3XiOsthVe1Zb+tXZjQ9bSUFzIU/6iwbpIPgxwYi1MU8bl7nmVWN Pnn1xYZsJax93CjDTIRMi8K8jTx23/a+Nwm+4JBbEvgwr3qEm0Oy6LT29cHnfN+g BCYU/2PrjYVNMflK7etodn0Wmd4q+Sigbn7k5GWNZblm8s1I51uCtBYYscWppYgB K8lGNN8jW6ZQ4WW9buiSUkEqVQDEQaQ7Rip7zbxavYj9SMCbakWmSWYIrca6YLr4 q6ArxvFqCsGXCnc9HHDCk3aY1RRVi0XZjzlAyRmG3Y8ErBpC87r+17QQHixIRiof u1OwGoN/K7ZioKiswjEzjmO2zWcI269386NaimYAIyPDyvFsdFPrjeRnVgLX5So6 CSJtFP2Q3t4+E/qCc5dsozrUiITK1C+j/GlT8VrgiKdpn5UraNz0GrjN8hrSpFVg pcY6ZXSkYoS5HaNVoPscNDBJIGciKfe+H9R+APlHuvzxVrYGXwRh1cofjJ4lz1B+ uNy/1xTzqgUXgKnfEGTI5zhDsWv3KUhpzZEc+WEle1OfGyesCMTWIkVPvhbX0X1D CCZHykeyNwdLPwAjpZkG44PUM+fyffp1qCpL0WqsvRRnzB5/CEKq779yNQDz8wIT ByGMdvI1502Dv283WasYCtLwscnjBT37ayDBZacNZTGEPmXAD5c= =QyKJ -----END PGP SIGNATURE-----