-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Apr 2025 22:49:23 +0200 Source: graphicsmagick Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev Architecture: arm64 Version: 1.4+really1.3.40-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick-q16-3 - format-independent image processing - C shared library libgraphicsmagick1-dev - format-independent image processing - C development files Closes: 1099955 Changes: graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Carlos Henrique Lima Melara ] * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension resource limits. (Closes: #1099955) . [ Salvatore Bonaccorso ] * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale matte (CVE-2025-32460) Checksums-Sha1: 02e7c6c6a79d9982952efb9075a73b0c8b2fde6f 4132012 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_arm64.deb 1439e1c2b595bee900d49d8c8df73c97d4dae04d 11290 graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64-buildd.buildinfo b29d9bf8aa1c8673aa69fe97387d9db19ff70925 1019800 graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64.deb 2e590171524eab0af4e5051bbc5c3bd2d4e926ea 57628 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_arm64.deb 50d222f3949533941264b24b181ce9b021fd0b70 106712 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_arm64.deb 2addb3e31c3ddd5285936f8d2ef64bafd1868f87 299392 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb de5b1d4627f35873ab8041c3811447ed83c9bf6b 1030628 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_arm64.deb 5edd5fd3dddccaf73faa7f9566afa2b6d513face 1357052 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb Checksums-Sha256: f3eaacdedae8e7705bf2d4b1181a32990c480f5561523cc47cf5ca05794c93a5 4132012 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_arm64.deb 3bfe685a879a80c266334e6a71dba312c9e256dadd62570ff05b8a166bb22e19 11290 graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64-buildd.buildinfo 959c91f9d33c09bcc3d8c5813dbc0d39162ff6652cb0b3bb98967a6f711eccd3 1019800 graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64.deb 35c6a4116ec6407dd178ad01c4022309191049a6f019acc917f7e9eaab23b067 57628 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_arm64.deb 858029b7386d7d0e3eecec07ce13bce125d0542da27ee213a3eabd8cc7c3e703 106712 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_arm64.deb e06b0746c7a47ee3d2ae22c526c9ad0d220466ac2dfde06e0150c19187b55325 299392 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb 50e5b0efef7a4801779cc486a2692755e60bea41194c0893dfac45d55c868399 1030628 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_arm64.deb 78764d328b2e589aa73a68bd963463025317e55f64975ad6bdde50ec231336de 1357052 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb Files: 41bbe798c5c7626b84e9f8d64efd58b3 4132012 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_arm64.deb 38637b9688fcc00a6e7a05edd2f5dd8d 11290 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64-buildd.buildinfo 2d5b0fb113b57249b98d102b035acef8 1019800 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_arm64.deb c1692b0dfbf036f0268134b834953322 57628 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_arm64.deb 90f8a87ea422bb3cc89f545150f87240 106712 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_arm64.deb 4f5408028baf0e32650bf6808fcc0da2 299392 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb 45944c3c5806919ce5a8b32624f80091 1030628 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_arm64.deb 0d300ef4e8c327bcf3578310bbdc2b1c 1357052 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvEwFZ4bqkVI+Rh6t+N4VxR6LZYEFAmf5iN0ACgkQ+N4VxR6L ZYHtVA/7B3rASKriQbaL3pN0D5XOxo7g9Wc3im4RNARKh0y/InxFhIOfVWmLcKJu 305p16R3oK2J3BOSobL3uRRq8i/2t3m3B1dgN52OTVzcrG9HXHxW5E2Lu7pUOhYa 0ZsLolQh6lwEsEiYWYL3KZDkjV6PSN1P21C/+8xxrXKO4KUN0xegvX7Wwla2+SKu rMiBW3PmqVJ6RIjk+PsAICo/m576cXTBlllAXk+c4/t2iS6nZCQcbTI/wVkGiZX7 di1oDl8YFHN2Ipf405DwAWdzcyAX08QIasXXpTpLSCXHLViZTwXeE5gNeiUL91Ey T2VesWFDHRfq71wGzZ0Q5MJgWx2xGhGDBMrvxVZGOyFZxT+XAwmnORE1qiwnrVW2 WwhscLEeYLeJnQ3QK+RHECWzInt4wRM0YZYE5Fmnlk9LV6QYGVLWmW6XX/wdxPre 7Htjw3z947vBMsC4WovcKVKlQpCMApR2J8kfx4qFgUPZLmFQcqIhZ2hgpGkOrnOe l2kBZrjd68N8F2OqQzKtqECF33j42IqrYlSWcH4lh7s4VvV55qCh+8lL9wygTaFU TJZ/NFj57DePMmTSG3ZDUgRxDocXstMdGW5zGMGGraaVqBhNTMEQlKLA6cMxKoRc 6h3d1EWJq6gWDtyS+PFQbBsvFY8aR5U/p+RHWwTbUKmY9VB7Qpg= =c8ei -----END PGP SIGNATURE-----