-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 06 Oct 2026 17:56:40 +0200 Source: graphicsmagick Architecture: source Version: 1.4+really1.3.48-2 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1149973 Changes: graphicsmagick (1.4+really1.3.48-2) unstable; urgency=high . * Fix CVE-2026-103118: limit recursion under ExtractPostscript() to avoid stack exhaustion given crafted WPG files (closes: #1149973). Checksums-Sha1: 2037faeb07332aa08951340665f68983490a8ebd 3026 graphicsmagick_1.4+really1.3.48-2.dsc 2718e368546708c2f8e32653fb5e149f22566011 165832 graphicsmagick_1.4+really1.3.48-2.debian.tar.xz Checksums-Sha256: 914162be5e602a772516f60a45200358031b4daf4241c8117307ba9358c95fd4 3026 graphicsmagick_1.4+really1.3.48-2.dsc 073ee661bc6e552b6e392b7845a9a2cc131b7ea2a76eb224be96f6b505b94e04 165832 graphicsmagick_1.4+really1.3.48-2.debian.tar.xz Files: a186c1434be1ed396e47e7f6627cf453 3026 graphics optional graphicsmagick_1.4+really1.3.48-2.dsc acb9d4419b2a7fa20e17d99d85b9414b 165832 graphics optional graphicsmagick_1.4+really1.3.48-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmrFIG8ACgkQ3OMQ54ZM yL/hgQ//VrgMBosSabBe4jWsF8OyP8MgDwkAac5FGQw/lzMYM0Cw4XYwEWtEb0Nz eajoziWvaAjwpcdvfmmDcikXEZk+YACLDjiq1YdIHcRXpqny8AteHwpC8PiDMQGs vlPEZzoe5ThZ4CvClf10MYFr2BM1V+HrLJh86XfWgYYnQEhkFq1n+K8dmsgWh7Rg cEie+HJ80XdTA848fF091HPzmnXzQL9CQtxYhB2NJt0z2RqrKFjf38K0B79A8CfG ge1H+PEKQ7epUvfMWVL/+tiMuOAa1bNxJOKL0ZV1O0h0yDYjM0c++2FGQBZT8ZSl byadFMolzQXGzTfSZ/qTsKHv5S1aDiuT8pGyELHw1NW+tz2BXo4Soab8DPonfMaK ihEhAU9hy4Ld6mHYlKzroswQ+4BRJNOmwCz9edYzdljGcGx0VSqvFUh41hNFEInN iyMqDw8ImggizQLCsT4Ni3QLPpgnpFntCavIquCsBx9FTy4cxG7yCv9U+ZuPEqGb 8ieQYjYpdaT01eS+3PrPE6daiPOWjdHQ+5iqjkdCeXwjwXdRtCf8H5MLy8LflzbQ WDUN5Xr5g6mDM2VCn3rZ99jUakqTONpQxY1ike2vwJX3i3wYlKqqrM5sn1JOknfn 8+/VzdfdNFHgmzFDNEtEjxVfNrvHPnUoRU8q5PploZoBx7e1H7w= =wvmo -----END PGP SIGNATURE-----
