-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 11 Jul 2016 17:49:16 +0200 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.16-1.1+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Daniel Kobras <kobras@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Changes: graphicsmagick (1.3.16-1.1+deb7u3) wheezy-security; urgency=high . * CVE-2016-5240: Prevent denial-of-service by detecting and rejecting negative stroke-dasharray arguments which were resulting in an endless loop. * CVE-2016-5241: Fix divide-by-zero problem if fill or stroke pattern image has zero columns or rows to prevent DoS attack. Checksums-Sha1: 56234046e8ca4d61eb998bae4382fc57d8d7ef31 2642 graphicsmagick_1.3.16-1.1+deb7u3.dsc f2ec0392d7a7d5cbe0d5bdff2931edbacedd73e9 8736761 graphicsmagick_1.3.16.orig.tar.gz 8b9e90464ea99d85a7cfc879ebc1200ba4bf9c1e 233978 graphicsmagick_1.3.16-1.1+deb7u3.diff.gz b13aaa72be25f3009c2313f20cd2991d82da1384 1033982 graphicsmagick_1.3.16-1.1+deb7u3_amd64.deb dff0ee842482347bf1acf1dba26144d0e684c2c4 1323816 libgraphicsmagick3_1.3.16-1.1+deb7u3_amd64.deb bfce9cabeca608e9ad746dee4b77a962b93ac82e 1819152 libgraphicsmagick1-dev_1.3.16-1.1+deb7u3_amd64.deb d0953b8ffe0bc6b0023d42f0d802726a8e289060 154068 libgraphicsmagick++3_1.3.16-1.1+deb7u3_amd64.deb dc2cfd322b9fd5085629c75d71449aad04440367 406658 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u3_amd64.deb 429796bc5f022dc4294b2a375791e311aeeef570 83226 libgraphics-magick-perl_1.3.16-1.1+deb7u3_amd64.deb 3c4d383766037d4ccce5ae47e7071e79d8fee863 3267978 graphicsmagick-dbg_1.3.16-1.1+deb7u3_amd64.deb eb32713085dd25f7799a5240603e73f26f79e615 17500 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u3_all.deb c6284f973687ee543460bc05d108ff4d7e85eaaf 20952 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u3_all.deb Checksums-Sha256: 97f9480af4975ca191cc267ed06384ff6e0f4d33ce0e2abea77e38858da583ee 2642 graphicsmagick_1.3.16-1.1+deb7u3.dsc ae2229370926dea6c2423cc1adaf551d33f38102677332294439365aaac1514b 8736761 graphicsmagick_1.3.16.orig.tar.gz 889b252030d742a033e825b62276dfbb4beee0ff5261326dfcbc96166f651166 233978 graphicsmagick_1.3.16-1.1+deb7u3.diff.gz 5730488750fc660154cb0a18bc8ef85dbdb50f5ae16c0ac509f26e2ca1d921a5 1033982 graphicsmagick_1.3.16-1.1+deb7u3_amd64.deb 11f2db19ded0c8fb21562e088677c7fe380d4be4b0e771220879d048c0fc0b6f 1323816 libgraphicsmagick3_1.3.16-1.1+deb7u3_amd64.deb ba961c2698e767efb5efa589214f6b2a6eb913839078b231381b690cbf124789 1819152 libgraphicsmagick1-dev_1.3.16-1.1+deb7u3_amd64.deb 4284cffecb420d90387fd3eec9745207ede548b0d2ef30125a482d6df9ce86fa 154068 libgraphicsmagick++3_1.3.16-1.1+deb7u3_amd64.deb 69730005b656a5e7f60f83983c461f38b74b62594b9694b12ad65efa1137312b 406658 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u3_amd64.deb fd51b98cb54829f5d1cea8cbd2dc68e3f4f209f0f6d45a77af7c29f254d84f22 83226 libgraphics-magick-perl_1.3.16-1.1+deb7u3_amd64.deb ba7f2e0b3cb6f38c60fd2ba109aa0dc21842ec2b3ad7992c06051f1b2b6565c4 3267978 graphicsmagick-dbg_1.3.16-1.1+deb7u3_amd64.deb 30930141362b048a01b237021cf4c291d2b52e26534b73c5b4199d901a9a3389 17500 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u3_all.deb 6645b803a04c70240301de6da28e581b329f535c5260e5faaabdc74cf299ad60 20952 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u3_all.deb Files: 6242d9583ffb711be5b8e23f0a260377 2642 graphics optional graphicsmagick_1.3.16-1.1+deb7u3.dsc 66a4b9c7af6165b5d293fed6ebe04e36 8736761 graphics optional graphicsmagick_1.3.16.orig.tar.gz ac2a33c17b9f7c9e1102487bfb666df8 233978 graphics optional graphicsmagick_1.3.16-1.1+deb7u3.diff.gz a7208d6f46b7cc321b813190346f7e06 1033982 graphics optional graphicsmagick_1.3.16-1.1+deb7u3_amd64.deb 3843940b7ee7b790089d09dbc6ebb7d4 1323816 libs optional libgraphicsmagick3_1.3.16-1.1+deb7u3_amd64.deb 279dc1ef1ed0cca1f4adabec8a049a21 1819152 libdevel optional libgraphicsmagick1-dev_1.3.16-1.1+deb7u3_amd64.deb c3f0292a573e953e85672a8348d3aa3b 154068 libs optional libgraphicsmagick++3_1.3.16-1.1+deb7u3_amd64.deb 3d11d2fa9335df672a7017b905ab82fe 406658 libdevel optional libgraphicsmagick++1-dev_1.3.16-1.1+deb7u3_amd64.deb 0b7739ef73f6995752c9641094e99a7e 83226 perl optional libgraphics-magick-perl_1.3.16-1.1+deb7u3_amd64.deb b47cfe638263cb7386370b301b12e046 3267978 debug extra graphicsmagick-dbg_1.3.16-1.1+deb7u3_amd64.deb 2450aa6b8d6e99fd90a24e0ba03ce1bb 17500 graphics extra graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u3_all.deb fc8cc4f2f9b484c7116cd23b6d102a15 20952 graphics extra graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXg8jKAAoJEB6VPifUMR5YgMoP/3eZ+82Bu/Rve6FwU3g1kw5Z w2c86g8Q25QjufOwCeffxY/S1sujMVhE8hQmRYLJGz2q3rJG/IdBwyG+S0ouQJu5 8V7IpklDHgwIXmZuSvw9+a4ssc42KpKIK4/8KkaEVDduS70s/xkMvEepcEM6Jy4I 72kt8bERQT8dli0Wd0EI5zxSexKklbhSoYL3GsqWXLx6mz/wNCWQ03RmongO7SlG i2Dm8lsvK6mSB18pJ14jXaawnUC8tyPC4zj1XYQBYSCstnXfxXaFp8nqdmmoAa8G fP7QZPO9EOofIFNqpBKEUJUvntDygiREDwTnETB7cByJ1dDp9cQ7wlWJZ7xL847K k+j7ncpv5nfsQOujbIBghXMTJYhyoM6XyS9UAMhWrkGGXyNZt0PBX7/zUX0lk6FL G4s+04lvT5diVKD/Z7eHff+11QIE48oArwx40o+vx3OfrDWtz1rUMoSy4monID08 xJWzop2a64YqGu7xGaKS+wwk5aE2m+ZxE0ue5n4XJKFsvL+JJgGTb9WzuA4f2Z+p Y5aqghe4Na1tObZGxOB+qCcPmRScOi1kUD7wViHcDuwBwaiCnbarOMAI8lC8rIhd Nwh/yLfZDs4xS5TZ8bGY2tR4EIw6Ca6xTZybehol4ljBU5eFBoCKH50/HRyS/tCT 0xBfs130UAOKhA7Xsk2I =XUj1 -----END PGP SIGNATURE-----