-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Apr 2025 22:49:23 +0200 Source: graphicsmagick Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev Architecture: mips64el Version: 1.4+really1.3.40-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Salvatore Bonaccorso Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick-q16-3 - format-independent image processing - C shared library libgraphicsmagick1-dev - format-independent image processing - C development files Closes: 1099955 Changes: graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Carlos Henrique Lima Melara ] * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension resource limits. (Closes: #1099955) . [ Salvatore Bonaccorso ] * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale matte (CVE-2025-32460) Checksums-Sha1: 877f3a7f44f1be68852dd06d98a1ad8d9d0ee47d 4296284 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mips64el.deb db0e7d7bf54f6580fa099e61dcafb91b4f6b7108 11185 graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el-buildd.buildinfo 102dddf2414504dc0235d304ef4b6cff47851a8b 1019868 graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el.deb 4abb6764e45f4ae647ef7d22a455f2731ac02750 54664 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mips64el.deb b0bc09a22b3cb323fe9bed6bbf66d6b79df50483 105916 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mips64el.deb 809871887616dd07f8dddc45cfe5d248a9ca5db2 322248 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb cd221148f71889287b0c849e8182068f2de45ff2 976696 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mips64el.deb cf7ba6184cb084a27c6018b6c65967defda3ff5b 1521688 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb Checksums-Sha256: 921a9d038e5975c37197068e66ea2e9ceab80467b0d2f334ddebc06680bf05c0 4296284 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mips64el.deb 482e5afa0b7a916bbff518e0af38efedbaa2d680ac6181c328b435a2b6e0dd3d 11185 graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el-buildd.buildinfo 7b7d596c6270d99e8280ba3ef1d479a04f7a2041a3305fcc9272822be26f6e08 1019868 graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el.deb d62ba277e584ea07b812c04a97d19d713ca7fb40f7da6836ca0e054f37b50614 54664 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mips64el.deb 88fcaeff595bcad272894855d3b19a6034972c0a18f86bf2767e81046af43b2d 105916 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mips64el.deb ca5867e90f4a93e8508bb230d4a0eaf67b576f4f5523163c5cf5d5bc01bf80c3 322248 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb 2deb0c179e56933317d79a6434bebfe0b764408ee4987dc17c3e93064de4c05e 976696 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mips64el.deb 6ad31c864e101067d7a83c6412cf5bf2251277fd616a605cffd08e00d6cb4041 1521688 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb Files: 6fff81405811cff3253fae0300d5dc39 4296284 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_mips64el.deb af8fa53f51ce0f30596d96cd50cbdea4 11185 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el-buildd.buildinfo 3803218ef3c5b81a019dd41f688008f4 1019868 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_mips64el.deb 8953ebf3c575149c9822c73e5eab7cb1 54664 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_mips64el.deb dc5c6fba67165a51e553f3a95926f3b8 105916 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_mips64el.deb 5612b9d4e068dafbe6a5986ea9eef79c 322248 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb 780fe1d6500944f29ebb49726f5aae77 976696 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_mips64el.deb 7449aad3737d075b33e8182f568b86b8 1521688 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmf5izQACgkQmf85J+x5 /aokHhAAlG4OxFfDW0Go6MuNw6VIoj0usDS0dlPVu1lVyE4aRB8sUeXZNbjhf+HX 0LNqH1gDIrafwR/tBdfZaK27LBZwn/mor7NIx7qP6RO8tNwlj3OvUFURTUZKNP1A zv8BTKdA82uXk2mQ1V9smq91Okm2J2moWMAX7Sxe2GPBHpu3jggcEmE9WsiqXCx9 42+JGgAiEldk2sOuAMDxqGGrVJTy8zfFrCY0H8RRanUncEojAkAtxFhuphW3Xm5j wBxLgrkLjZM66xECNtPNlg4Rpbe5o/qAYt/YnS6Hosy89hALlvrwe/nmuE+C1esK Ls1tZd741y0LljFzV9VPjZNWeKw/bqR7Mde0purBJjWqNOpv+OOg9XiSMadSSWZT o+D+iJKcKk29Ul9ORTsHHne9gIBmtkS8XTSiMRBInRfTpBkoZgURg1TqPGDUXc2+ 3wHlxhgwIJdxT7vwAKFd90+Sjk6vmgIIpvjHU/We1tabrZJlOOVm2f/qx1uqEiKE 4kfiuNOoN5NQgvjghsCn6KIsmCpl1PsxsAt/g2+8DNftv/Nln+tAHzEgIHseFKuS VrxE+M01+jIXBzgfpCTzVHzLFZ8q1iG1qO043qeoYdjOC8oC/0YdHDAyG1sQvTxQ 3PmI+nCH1ZCY3kaxsAlSbdmr5GfxrbMPAJMUOSVuhhtTY2v5mu4= =7kYN -----END PGP SIGNATURE-----