-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Apr 2025 22:49:23 +0200 Source: graphicsmagick Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev Architecture: mipsel Version: 1.4+really1.3.40-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Salvatore Bonaccorso Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick-q16-3 - format-independent image processing - C shared library libgraphicsmagick1-dev - format-independent image processing - C development files Closes: 1099955 Changes: graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Carlos Henrique Lima Melara ] * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension resource limits. (Closes: #1099955) . [ Salvatore Bonaccorso ] * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale matte (CVE-2025-32460) Checksums-Sha1: 4edca47171ef21fed6e47cd914d8c05e841eca62 4191640 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mipsel.deb f60f408bfa92b2fc41804a7459237d90814a2d23 11135 graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel-buildd.buildinfo 4bf46beb4bb8b578e788daf4b5b22272b827d98b 1019772 graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel.deb 45e9ca7a1e8292199d146d1ab3419821d5cf21d1 54400 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mipsel.deb f9c4d4efdee1be6816c8aebe4f3e7abe1bad1084 106320 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mipsel.deb 67ba508514ee76232e7910c635fdbb17d065e1ee 317768 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb a38cc4c11723a05859e2f6a8bcceda1d16238712 1001260 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mipsel.deb f7041861f3dc9614ce0c8e10570fb09aba418536 1535812 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb Checksums-Sha256: 0b352af9aecdad7885aae16c284d41fa3823238cfc14ad02cf8f486e41aee9b1 4191640 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mipsel.deb c5519e14e89f57257671e10cc099ae1684614e95aa3b38aa2b1443daf6a24ebf 11135 graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel-buildd.buildinfo dce29826652504c9dc42901c335ce85f6490478710a6c5752c1b9bc766f7319f 1019772 graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel.deb 38f2cfdf5e6b701e1e11ecbdf94541aa9e284951d12c83b6c43884c0f5f803fe 54400 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mipsel.deb e24e1fe000d448220215f3167c954677e5152f6b68d149fee670d0ee7ba39de4 106320 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mipsel.deb c8b0cc534e565ee18d197abed295a7bf91d39832d6c588d692a9b0a0830d9b16 317768 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb 1e1855b6e68140891f26fe9dbf99b7dc74bd1462f928e1d6bf9ed1166591c6f5 1001260 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mipsel.deb 5d675c09201725426c2f0d118f15d1922fd9b97d7aa768313e25e594f9bef290 1535812 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb Files: dbbbfe977ec5853037f67de92ab23347 4191640 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mipsel.deb 8f79b9d896c9066a2dcc4b13424404d3 11135 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel-buildd.buildinfo f31b70d8cf38952fed332961e7063d9d 1019772 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_mipsel.deb 6bcb26a2fb11d4afab65fac152a709bb 54400 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mipsel.deb 07e92b14695bb28711caae608cb01085 106320 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mipsel.deb 9ab70e05478f70c5cf13fbb174cac781 317768 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb acc72efa013c960e65976cb92850ac46 1001260 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mipsel.deb b364cc88d0e4609fafb3c9982f71295f 1535812 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmf5it8ACgkQmlVdU6AM 9BU4lBAAooQIBGUZA6fsFTJn1o8gYq//nGnObCZuHuiKM1vuSBgk8bWp//kjM9CF 4VyhwHNwvWGFH5uIE3XHnxBGillhUoZuCEfs4WYvHB/l14SqtN8DXhCrc2XDtf9y YPReIqaJ+Imf82uVTAR0aKAtQZE+ynEFLU/WSSY1my3tBTn6mWwqoShshV7NR7c7 oyeNiG29SKHTsfv1UZl3ZDpvLA/9G+I7D+Nl8AmsD1OToFOnt47LdBOrbA5eE2F9 heCS4QeNl/TPeNRoeNRQ0jKpciA9OPHJHW1GuHeY5OW9gfvA3+/oG0QYkZ1KwF7p 00SypPsDopbIWA88u8q4cJT8Pk87iLzKMp1I4y5lZCtb/PVjcIPEdhA22ws/2cLk IYY/lQn4oYY5KjUd8sMza+huEK8Ton+nL5qvVfCekGYluTbrPFR6q8Lhil9A9kgI uhx0TDxBCEs6bLEa0BnBQzeZT9Nul1z0BO7E+IzcGdVKiAwWg6lZhlVnpAkMYyG9 IkfMnt1TAD2vs6e74Eg21lKRj5GhG1UhUykSA3eAaWpku2YvLsej7jXqyc7T9plM K2Twt6IavmvqIjB/LkPhVTraq/RUHFD8HHBduHOPkeNCf7aW2tNfXGZxu8RmWajO 4Bav9SWHdAtmgUrLIkiSjq9OKDC0+R1VkbwMHNQ4x71rI+yreME= =bPuG -----END PGP SIGNATURE-----