-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Apr 2025 22:49:23 +0200 Source: graphicsmagick Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev Architecture: amd64 Version: 1.4+really1.3.40-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Salvatore Bonaccorso Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick-q16-3 - format-independent image processing - C shared library libgraphicsmagick1-dev - format-independent image processing - C development files Closes: 1099955 Changes: graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Carlos Henrique Lima Melara ] * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension resource limits. (Closes: #1099955) . [ Salvatore Bonaccorso ] * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale matte (CVE-2025-32460) Checksums-Sha1: ec94237123b13a98c9e3217b48f3661eba790f36 4210256 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_amd64.deb b2b764399bbde51d314fef8dbf2ebbf531d099c4 11291 graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64-buildd.buildinfo 1f126e3c22839440bf7ab6bbe0cf12d0f5d906ab 1019724 graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64.deb ff29077c322e0a4ec95d337845ddd05b17f7787b 62432 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_amd64.deb a8221f4d3aa11eb470d4880ac129c279f8605c6c 115160 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_amd64.deb 095bdfd97d0785514531dd9330ab1e364fc6ff71 304424 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb fc349eb827254f962fa12cf38d5610201296b586 1180096 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_amd64.deb 32908ef073ae866d8e86515bb09e6f45c885cc49 1433704 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb Checksums-Sha256: cf77a56a7e748c11f7886843bf1ed82ba58cff4c893f02c1ba422cb851f46c5a 4210256 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_amd64.deb a8446256648701ec7a66992f21f4fb010c1a930e20090d13a2edf6023511ea47 11291 graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64-buildd.buildinfo e1117e102736371483897636d237251ab181719578010c4a02ca647e3af556a3 1019724 graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64.deb 1b955f2c2c9fee0e42fd8c6ebacf7bfcfd135529ec24fff101bba3b712d94f72 62432 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_amd64.deb 80fa067607c95ac293792d0fafdc9129db2561abf77af0847c0fa5cf4824ba46 115160 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_amd64.deb 0b18619b58aae091005cbd589ef8572269eb58ea0c11fc74521fa4ab7f5a75e6 304424 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb e032e865a709ba06aa2343c584f2df246357696ff24233f8e6e50c6603d515b1 1180096 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_amd64.deb 55c7b268a683695b7d27e7e10ac805639c2f553e0077e7f4b5141510df4a942c 1433704 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb Files: 47c72e2f41b662a1bd740d23f350a532 4210256 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_amd64.deb 079924c41a60eec957654c7dc90607f1 11291 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64-buildd.buildinfo 54ef7c1b282cf49c0a474c4159d6f533 1019724 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_amd64.deb 342f52a763876e53b651714a232d5520 62432 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_amd64.deb 26e6cabd2976611ceec2b4a38e587801 115160 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_amd64.deb 8d2de873942143e8859e2f436c707ee2 304424 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb 25ca0fc03afd9d236b8931029ef5c797 1180096 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_amd64.deb a87882e365bebe689d4f985bc8de147a 1433704 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmf5iWkACgkQfUw6/tXb AmNR6Q/9ElSALbcBb+B+2RjSMPW9/O20WV2jzzGEVjmO8cUUEwnuTLcQAuqj1dJd 6g7WHeMHYXWvbDHgA78g5tuo3x97grXt3L5lGTsfNKtPwPhZ4LD+ObE2wfaqbrWM eIkKhgc7WGVZmIolJnnI+oUCXNIRUxmwZTC/xScQiRR0Cq2F2KY9a4KlOvBxVsmO BlLwS6C7eRSDMkhYb7aACjfGIJrtLn7GuRQtNIoNYGytzuOjiCgZ2TpgDasMpoGv RwvN33H9ThALOAibtXdzglT/WLnMHPdJIS0D4pHfdnmvPLpkSAktS4oMk7oJqyFE uLLDkYf18teQsNi3iicI00PPwCjkURjGEVwxeRUtYiN/I1OOtRfExleVf3a0GXao xRmKq8gQyuDAnCVRNCbLfZpnJdYeBVqNY/UEvfOm/4PqalMgFn/6mxf1nyQweFUM PgR24sqX/GNITLUSnwSdn4Fsis0hx/XlhdzEkFiPsVYF4gqcwQVNSO2loZUz/V1r U12KOJfCBRQD8ZtMrk5PXLg2OQ63EA60kLBXntYmqPXLf3pBYdRncITUF7PSfGiH b47vi2lqoXq2OeFisW2NBG1h7SpuRXeDgIjeFpzAKJbM2L/dsZC3LprzX3Bt+mpt QPkfzxYpxn7D3M50FfNbezO4s/GyZrKNFdJtPgkK4KqHP0+FBnE= =mQ5M -----END PGP SIGNATURE-----