-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 20 Mar 2026 21:51:31 +0100 Source: imagemagick Architecture: source Version: 8:7.1.2.18+dfsg1-1 Distribution: unstable Urgency: high Maintainer: ImageMagick Packaging Team <pkg-gmagick-im-team@lists.alioth.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1131687 Changes: imagemagick (8:7.1.2.18+dfsg1-1) unstable; urgency=high . * New upstream version * Fix CVE-2026-32636: The NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte * Fix rmagick regression in disolve (Closes: #1131687) Checksums-Sha1: 91f51fc49a91d498db0f3a68ad3d08d884e4eca1 5202 imagemagick_7.1.2.18+dfsg1-1.dsc 2de6bdfed52686afac619e8dc71cb497455281c7 10531512 imagemagick_7.1.2.18+dfsg1.orig.tar.xz aec6acf09443a890a510e0390b7437b1853bbbf4 271492 imagemagick_7.1.2.18+dfsg1-1.debian.tar.xz 596e93d64db840e5c539bda82a0ce8c8d3f16f67 8572 imagemagick_7.1.2.18+dfsg1-1_source.buildinfo Checksums-Sha256: 59e70a320bdf83ceed8143d5304366f6a1cd63c7e9fa70a18e8e83b6abdd9760 5202 imagemagick_7.1.2.18+dfsg1-1.dsc 22404c1dd467b22596be48bb54b37063d1941663000df0bdf05b2e852ca8a4a8 10531512 imagemagick_7.1.2.18+dfsg1.orig.tar.xz 438745c4d7606c0fdc7bc3a95259fa018feff91f587698c9686544967d046e10 271492 imagemagick_7.1.2.18+dfsg1-1.debian.tar.xz 829f90235b3fdbf2d8cbcb7bf5cbdc7acc19606192120e001a5c5c2c2f4aa80c 8572 imagemagick_7.1.2.18+dfsg1-1_source.buildinfo Files: b3544d01def89acc9bacca19953e0fd3 5202 graphics optional imagemagick_7.1.2.18+dfsg1-1.dsc bd600ccd71ea43cf64a926983d0b7e9f 10531512 graphics optional imagemagick_7.1.2.18+dfsg1.orig.tar.xz 4cefa215cab2dbc77bfdad67520caea7 271492 graphics optional imagemagick_7.1.2.18+dfsg1-1.debian.tar.xz c9d22e3d438c7ba42e5bcb822badba3a 8572 graphics optional imagemagick_7.1.2.18+dfsg1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJpyqMmCRAAOhotqkEIX0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmfF1vEc4s+FYnNG0KKf1H5gCaisA6jmpCbh+bCZetit nhYhBF0Bh7lAokW617D1agA6Gi2qQQhfAABeFg//YZT1aiKJiaXyBug7jA6E1F7s uJjw5tzBPhmYp+0eenr1TetvQYgqRnIGhEOKpMazoFevl1e0o17xpxxaafDh5vYL S16aXZAinrd/n7lZUu0E3GxPhjIoqB5SH/oyGMoCGWsruWuGg/wTk4v8jgM05cUN QaDd4Ah7QXHQdxeyL+O3mgI57EsVirGlycCexznS1fGgPvCcf2QqTBKA21pT1pIS DmhHzqcKcJkpt7xzEXcd5SdoXDFER+fmkJptr2nHV7BnAk+hypm98Ig9MpZSUxlZ 2jpPxQnu9ZrmEeQf6cuTCeAVqrVym0BLhr7faFvybZfOVGOW7o1gJdpQbBpS+2Lq HUBrHaFFXHAZRALiYKi2VAAVdTEhwo3/GY5UIuDzvVYREIhnYSiGR6IsjPvopTFw syJ5oZuiJe8fXpfJirgmYMJAP0unTqHpsgfgASxSilNRwWDIGWtYUVrXLdXTkn7K K77j4meFJyp6nEbDVp2CRi6foekBsWTSDIXVPIlDx2z0T207zHGqlV69t1RHdutn GzIhgFA5ifxQGIPdzRcuJjYN7JAzDRJKREP7A9v2sUq0y9koxN+VkCPWbJfGFUiB 3ndQfoUcJmXXePf+cB+vER5DMe/4mjAiRNH4wnVfRiGgqm8oIJv4M23YNZTObSlf hZjAIwy+V28M/q9BJ2A= =Zvmt -----END PGP SIGNATURE-----