-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Nov 2017 11:59:20 -0500 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.16-1.1+deb7u14 Distribution: wheezy-security Urgency: high Maintainer: Daniel Kobras <kobras@debian.org> Changed-By: Roberto C. Sanchez <roberto@debian.org> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Changes: graphicsmagick (1.3.16-1.1+deb7u14) wheezy-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2017-16669: Graphicsmagick was vulnerable to a heap-based buffer overflow and application crash vulnerability related to the AcquireCacheNexus function in magick/pixel_cache.c. The problem could be exploited with a specially crafted file. Checksums-Sha1: cf38933cb43e6b9faf9b2df5ff67421ae0c6ec1d 2763 graphicsmagick_1.3.16-1.1+deb7u14.dsc 56c8b81af9f41cf27d1a2a321782388f0097cd67 170496 graphicsmagick_1.3.16-1.1+deb7u14.debian.tar.xz cb17d6a601f3952513f5ad4650e51e2edc4fa0d4 1034186 graphicsmagick_1.3.16-1.1+deb7u14_amd64.deb fdbd784e9e22f6cc7fc48f823ac58802013c3eb2 1326208 libgraphicsmagick3_1.3.16-1.1+deb7u14_amd64.deb acf8b1b627c24bcb9577bb094643bef88d4c26e4 1821090 libgraphicsmagick1-dev_1.3.16-1.1+deb7u14_amd64.deb 64eb3f464f9c73b60e34bfa1e1a3fe87a411bc13 156080 libgraphicsmagick++3_1.3.16-1.1+deb7u14_amd64.deb 42c71d77db421ea3cad764069361cda92ae80861 406014 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u14_amd64.deb 3601877eca334dcf72ac1c0bef6ef7eda1636eba 85108 libgraphics-magick-perl_1.3.16-1.1+deb7u14_amd64.deb d0578ebbbda7ed2d4a531983b405dbca21a5f1ba 3272118 graphicsmagick-dbg_1.3.16-1.1+deb7u14_amd64.deb a8edd1674f8e77de33e93e7e3a5aebe13968bb46 19244 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u14_all.deb ea6a0b3129e26c1b1353f80a946e2e3e78188530 22302 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u14_all.deb Checksums-Sha256: f4fd68da6acf885c4b448cdc4f2b2b4c96d89558883ddf1b8a043594599c9288 2763 graphicsmagick_1.3.16-1.1+deb7u14.dsc 533d5677cbd657ef387818845d3eb5f5130ad29aa82eca96d16d24b6a64bd96d 170496 graphicsmagick_1.3.16-1.1+deb7u14.debian.tar.xz 1cab26661a2deae7d93a61d236a34b9398bc0e7cc88590dda710ae8d686d9605 1034186 graphicsmagick_1.3.16-1.1+deb7u14_amd64.deb f1ae92128a3521b56f78e69289b8b330c1c2d3d2891200f3023b98bcb0b23095 1326208 libgraphicsmagick3_1.3.16-1.1+deb7u14_amd64.deb ad28a05b7e3de480df333bfbce846715edfaa31f7949980ac2026e53ec82f0cd 1821090 libgraphicsmagick1-dev_1.3.16-1.1+deb7u14_amd64.deb e4d62cab73872eb8d05eba5b21308988d123c290edbb115bd60c23c982398930 156080 libgraphicsmagick++3_1.3.16-1.1+deb7u14_amd64.deb 0fb0892078a3b13fb16fa7016017d3fdb374bd6f9f13e88d040ff5301b67e964 406014 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u14_amd64.deb f82a6062aee9bd7800b211f07fcd6f32809bebae49e774f47ddeb79c31460b58 85108 libgraphics-magick-perl_1.3.16-1.1+deb7u14_amd64.deb 484e206eb4472f5d290a1aa61586617b828e4ea637c75e0e3d66fc491ca6d4ab 3272118 graphicsmagick-dbg_1.3.16-1.1+deb7u14_amd64.deb fefcb2ecc4322e1d81b44b81652d8eeab0f5e43781c6999fc6370742b93cb8d4 19244 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u14_all.deb 6db7e22f9222e82d8970ea8dabbfe7fe2d044625d30e1decaaed97f08ac8a690 22302 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u14_all.deb Files: 48646f4f6ed32ecc2ce1b857c5b94d39 2763 graphics optional graphicsmagick_1.3.16-1.1+deb7u14.dsc 7e1037fdcca205af9979b0706cb33be6 170496 graphics optional graphicsmagick_1.3.16-1.1+deb7u14.debian.tar.xz d225084b49145936e853b59dee0170d7 1034186 graphics optional graphicsmagick_1.3.16-1.1+deb7u14_amd64.deb 79fa79fa57e0aca785da3c9b745d55ce 1326208 libs optional libgraphicsmagick3_1.3.16-1.1+deb7u14_amd64.deb 0135bc7c5558e5310080425bbe2c8d9b 1821090 libdevel optional libgraphicsmagick1-dev_1.3.16-1.1+deb7u14_amd64.deb e2f452079b7b3a9d151d058ab8e3af21 156080 libs optional libgraphicsmagick++3_1.3.16-1.1+deb7u14_amd64.deb 4970523e36a41c050125a8f84b578854 406014 libdevel optional libgraphicsmagick++1-dev_1.3.16-1.1+deb7u14_amd64.deb 045475984c760c7556009e175616a6d6 85108 perl optional libgraphics-magick-perl_1.3.16-1.1+deb7u14_amd64.deb 3a1b94f497991721a0c1e2f39567b636 3272118 debug extra graphicsmagick-dbg_1.3.16-1.1+deb7u14_amd64.deb 57f56295f3ee148d7d10d5a2f377c7f1 19244 graphics extra graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u14_all.deb f36571e4f8960b251fbb92aa139878be 22302 graphics extra graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u14_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAloF9EwACgkQLNd4Xt2n sg/yVQ/9GHeRX8gpgqBt8El0aU9OSWVve7NyUUQvvVBZdQNYB8jGffgEm8Lpo1lw Jt9EDiZLtwlYeuRO++QGxl0KeW+3h5P2f1XX8g9a/0h9G8EeJY2oM2za043KI5kp tx0Q1pPnU5e5GXQgiRBp28gmUSYM9eMhAd2BqEbOY6H3DEBwuwOy8jJImWbEfdx1 bciH2KBs0Ia8BAGNpVoeVjLdRG1KfCulvRcKhaQCn3Ph2c8N9idZ1nsHgAcKAPW0 GW5IKNeBuA0QFFwFAR2jrE8IHTj6Dpj1mZx+bHHcZyY+oZPH/LscyOhyLvrNTpFK ialwZvTqquFr0c4TwMHpHINZFIL3LJ0eJHAFTf7zjjc0iwvOR+kl+7M4zSr1/mAW +1fcE4t9vFJJ64IwYuEjj29tbxQxcyq7rYfwNrby7Lff99faQt4+zKTY2Iu6wVmU 8KnXco7OD3EV5CACnixOst9CubKD5OqcloZqVUA0+5l48sOKEBusZ17pRoUrxUin HfxcOpsk4B/9FtqrnVVvN5kPnpLmdUg+IXuYGIC4dqkXnzprVX6MSrCuTlkWOJ7v P2TkAzdTgco4cMvdgDuMYL0k9c1U/5QPGH5S8M109VmdxZV4ms8jjKqM295tvDfH ug/6s0OPrSVo7A/AfIcSBy8Ue4QhujHR8UK2o9zci/BKbLWfR64= =Oon2 -----END PGP SIGNATURE-----