-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 Jun 2018 22:00:53 +0200 Source: graphicsmagick Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg Architecture: source amd64 all Version: 1.3.20-3+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick++3 - format-independent image processing - C++ shared library libgraphicsmagick1-dev - format-independent image processing - C development files libgraphicsmagick3 - format-independent image processing - C shared library Closes: 870149 870157 872574 873099 873119 873129 873130 881391 881524 884905 Changes: graphicsmagick (1.3.20-3+deb8u3) jessie-security; urgency=high . * Non-maintainer upload. * Fix various security vulnerabilities, heap-based buffer overflows or overreads that may lead to a denial of service or disclosure of in-memory information or other unspecified impact by processing a malformed image file. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2016-3716 * Fix CVE-2016-3717 * Fix CVE-2016-3718 * Fix CVE-2016-5241 * Fix CVE-2016-7446 * Fix CVE-2016-7447 * Fix CVE-2016-7448 * Fix CVE-2016-7449 . [ Markus Koschany ] * Fix CVE-2017-11636. (Closes: #870149) * Fix CVE-2017-11643. (Closes: #870157) * Fix CVE-2017-12937. (Closes: #872574) * Fix CVE-2017-13063, CVE-2017-13064, CVE-2017-13065. (Closes: #873130, #873129, #873119) * Fix CVE-2017-13134. (Closes: #873099, #881524) * Fix CVE-2017-14314. * Fix CVE-2017-14733. * Fix CVE-2017-16353. * Fix CVE-2017-16669. (Closes: #881391) * Fix CVE-2017-17498. * Fix CVE-2017-17500 * Fix CVE-2017-17501. * Fix CVE-2017-17502. * Fix CVE-2017-17503. * Fix CVE-2017-17782. (Closes: #884905) * Fix CVE-2017-17912. * Fix CVE-2017-17915 Checksums-Sha1: 752804f06fd1babe90c5b2ba4b3412f046cc94d7 2953 graphicsmagick_1.3.20-3+deb8u3.dsc f29cb981dec3437a19fc9aaf03f9712fe64ad336 184540 graphicsmagick_1.3.20-3+deb8u3.debian.tar.xz e79cdf27b11f31a916b2cd2d7dc08bb4ec89e856 791434 graphicsmagick_1.3.20-3+deb8u3_amd64.deb 1c7008e6b143e2f4376525d64650a920d8f5eaf2 1100382 libgraphicsmagick3_1.3.20-3+deb8u3_amd64.deb b084a44f6a31f2dbcfcd7e9a44988981358d2429 1285340 libgraphicsmagick1-dev_1.3.20-3+deb8u3_amd64.deb 00a26f0caddb75f6383fd694892251e55d5b1e68 115768 libgraphicsmagick++3_1.3.20-3+deb8u3_amd64.deb 9b0673d722c2c36fec9b037a0c85560d1b9fa4c4 297986 libgraphicsmagick++1-dev_1.3.20-3+deb8u3_amd64.deb 0e21dec470d1410fccc3a0416c1295cc060bafda 73666 libgraphics-magick-perl_1.3.20-3+deb8u3_amd64.deb baf2f514c9f01702de07f7421fab5ae7c4c6440a 2217702 graphicsmagick-dbg_1.3.20-3+deb8u3_amd64.deb 69e8678f88c7c30b3054a1d5e2f7e1f67ce353d2 25822 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u3_all.deb a9761c664e400d83f29af6d92c1499fff27cff85 29210 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u3_all.deb Checksums-Sha256: c7c408f48c45b53e1b44bfad529a6374588fc1fedfb6726628bb00113646b4c5 2953 graphicsmagick_1.3.20-3+deb8u3.dsc fcd0c9aefbc10e3acb4223eae9cc09d65eabc1eba368abdbda1ba0fb695824ff 184540 graphicsmagick_1.3.20-3+deb8u3.debian.tar.xz bdef04491ac6fd70443164fd6cf435e9a9986e44f97490c3ed148ac62881635e 791434 graphicsmagick_1.3.20-3+deb8u3_amd64.deb 440f62170031e38d808a38e01a2d639bbe4ef2dcb638ff4c43a8c631aa950ce7 1100382 libgraphicsmagick3_1.3.20-3+deb8u3_amd64.deb 57b6f3cd514483b346e9b431a17f41c3abe129205f917b2e63aaba2935994f8e 1285340 libgraphicsmagick1-dev_1.3.20-3+deb8u3_amd64.deb df2a4f9293add8047f1ae99b8a1f2ff2d3d030dabdfc4bca03fcb2c23d4de0f4 115768 libgraphicsmagick++3_1.3.20-3+deb8u3_amd64.deb e8c5596d9f989deef3b48af0e3e047dc137449b7ff3bd1aa514cac02a19bccbf 297986 libgraphicsmagick++1-dev_1.3.20-3+deb8u3_amd64.deb 340d6141b14a437a260459f4d65d5c48aa2fd62ae00588cee7cddbf49df625be 73666 libgraphics-magick-perl_1.3.20-3+deb8u3_amd64.deb 2c1dce1721cac537d7914ad9209f70f4654bf7f07c4d92714ca34608c3214a7e 2217702 graphicsmagick-dbg_1.3.20-3+deb8u3_amd64.deb 205b9d191238351d29da56834f9afeb524d75246cd30b21bfa458c0c76495fbc 25822 graphicsmagick-imagemagick-compat_1.3.20-3+deb8u3_all.deb 07330109e1ed8e864ea34fe4516e6c61b87a378dbadb37495523870adfad6ba2 29210 graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u3_all.deb Files: 9487b423b58dd97f7da13be3f49cd3e1 2953 graphics optional graphicsmagick_1.3.20-3+deb8u3.dsc ac043be5bac7d68f301aa2c5b8c7f2f0 184540 graphics optional graphicsmagick_1.3.20-3+deb8u3.debian.tar.xz 3b47038014f85d8f71124874d1dbec37 791434 graphics optional graphicsmagick_1.3.20-3+deb8u3_amd64.deb 91702125699dc0dff2e8769a02c10648 1100382 libs optional libgraphicsmagick3_1.3.20-3+deb8u3_amd64.deb 6cd2dbbbe9d47ef768f8488a0562001a 1285340 libdevel optional libgraphicsmagick1-dev_1.3.20-3+deb8u3_amd64.deb 87edd6ab69f69442edaf4fb5d866640c 115768 libs optional libgraphicsmagick++3_1.3.20-3+deb8u3_amd64.deb ac5c5e79d7b68c5d470c6623b19e70d1 297986 libdevel optional libgraphicsmagick++1-dev_1.3.20-3+deb8u3_amd64.deb ab8bc1ea38a607fc9edc66b77428c43d 73666 perl optional libgraphics-magick-perl_1.3.20-3+deb8u3_amd64.deb 8efa3a14971c20d6e2f29c7c3b09bd68 2217702 debug extra graphicsmagick-dbg_1.3.20-3+deb8u3_amd64.deb 5e6a7e5ae2d3f8d030e187cca6fe1230 25822 graphics extra graphicsmagick-imagemagick-compat_1.3.20-3+deb8u3_all.deb 24d6050aaa42ba52a42bffabc7e7e48a 29210 graphics extra graphicsmagick-libmagick-dev-compat_1.3.20-3+deb8u3_all.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlsz8A9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk/YEP/i5OfUXp0oDEt/PJK+AkAO1B2m3OAEXdnibv +afdboOmyvtjqQ4m1L74BNZQ6fCNn/xJepZgsi1HzflwH+rSUnLVWD7HPZOpIVr3 KDZS+E+RAHdwI5bdNr9JuDrB6jozIK772s/2X27RHO1WOaBeKy5rKC2rF8zttiLx hoPLByq9Z9iBs52J+jzAIL3uKO3QEPwNZ/rLlqxH4xDUEQTHChZT+jIhKFkfzPlx aD5U8uVpiPGW/x81pJ5jddgUofhvOIS2V5MXjbpii/4es3gbinKG4OKCAzl6bATu sko+O5UokOiMRyhHOqdFtEjrfKKkgIuHBurcffBfjJmRLtLHzeGiZC2C1YjwlaP6 3z1snWX1fBrcazZL85eerMMOkamKEVNo0LVYUGOKXEcF3pJmI2Hh5ybE7ieJTXTF 7J23BEkRiQ5Qqpt6vgByjiwJWvqFsGF8k+Bclet1lLVkSGUsJYrcOJnH5P7+/xaB zAUziOXqmuzv03EmA2AUVLapfpY37j1NqFiPmPqf8YFuUw9RhBcbsXBZdXFWX3li Ki6Mt15dDqaLMUXtq/EdoPDbzOy9vbO8WM8Hyr4dFtdVQhkh+cKsK5lJeKfCY0sS KnU9Q4wFvXBJOX8r6mXu4CebSGRoEowGRnPdA+IMnm0YBpU9NKA2mjHAb+3AEGET 2VaayjBp =yrQ4 -----END PGP SIGNATURE-----
