-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 11 Oct 2026 09:14:32 +0200
Source: graphicsmagick
Architecture: source
Version: 1.4+really1.3.49-1
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changes:
graphicsmagick (1.4+really1.3.49-1) unstable; urgency=high
.
* New upstream release:
- fixes CVE-2025-55154: guard against integer overflow and underflow
in MNG MAGN chunk handling,
- fixes CVE-2026-56379: command injection vulnerability in the SVG
decoder,
- fixes CVE-2026-61464: heap-based buffer over-write vulnerability.
Checksums-Sha1:
6ba2c909e9e6cc1771aeac5fb9f475659361b583 3026 graphicsmagick_1.4+really1.3.49-1.dsc
9e079257289eca4095ac253b67f51b6a08886e45 6136612 graphicsmagick_1.4+really1.3.49.orig.tar.xz
ebfba1b25e54f95fa0d0130c09be35261581adbf 228 graphicsmagick_1.4+really1.3.49.orig.tar.xz.asc
41b5ab65ae59a9b5c27c611134f83331083df04f 157020 graphicsmagick_1.4+really1.3.49-1.debian.tar.xz
Checksums-Sha256:
6121890fa0298acb9ba0a4e1558cf90ca16437f360b805531d7b534755a10857 3026 graphicsmagick_1.4+really1.3.49-1.dsc
7efa070dc31116b4315061b39f84bc7181e8b060bf61214ec9af851131af9c81 6136612 graphicsmagick_1.4+really1.3.49.orig.tar.xz
90169e65ac4e37b0ff0e3a161d88a2dd78eac6e8e68c18785f15a1c7255778c8 228 graphicsmagick_1.4+really1.3.49.orig.tar.xz.asc
7ba8dede444364ac6b5a9a710ce051e8630873bae831bc57e26c6705db31ef5d 157020 graphicsmagick_1.4+really1.3.49-1.debian.tar.xz
Files:
d8783afb153c3218f3353c5239fb2eb7 3026 graphics optional graphicsmagick_1.4+really1.3.49-1.dsc
8658f5d02cd25fd5e0316081805738e1 6136612 graphics optional graphicsmagick_1.4+really1.3.49.orig.tar.xz
2615a726fee00612207bd12abe1c29a3 228 graphics optional graphicsmagick_1.4+really1.3.49.orig.tar.xz.asc
912597a8abdac2068cb113ed4a9c1410 157020 graphics optional graphicsmagick_1.4+really1.3.49-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=bV3R
-----END PGP SIGNATURE-----
