-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Apr 2025 22:49:23 +0200
Source: graphicsmagick
Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev
Architecture: i386
Version: 1.4+really1.3.40-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 graphicsmagick - collection of image processing tools
 graphicsmagick-dbg - format-independent image processing - debugging symbols
 libgraphics-magick-perl - format-independent image processing - perl interface
 libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library
 libgraphicsmagick++1-dev - format-independent image processing - C++ development files
 libgraphicsmagick-q16-3 - format-independent image processing - C shared library
 libgraphicsmagick1-dev - format-independent image processing - C development files
Closes: 1099955
Changes:
 graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
 .
   [ Carlos Henrique Lima Melara ]
   * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension
     resource limits. (Closes: #1099955)
 .
   [ Salvatore Bonaccorso ]
   * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale
     matte (CVE-2025-32460)
Checksums-Sha1:
 cbd9f29d5e38ecc2f37034ba43696358564c814c 3631468 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_i386.deb
 c6d865a987ebf8da3a0b9ed47210466efefd1630 11232 graphicsmagick_1.4+really1.3.40-4+deb12u1_i386-buildd.buildinfo
 84e5c231acbd2d0820c334e7ba61385837554424 1019696 graphicsmagick_1.4+really1.3.40-4+deb12u1_i386.deb
 59fa5bae6a161620fb93e7ef91b4ed6b44d19b14 64556 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_i386.deb
 d28787f7b469521a62683b351afc361b968aa7f9 126088 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_i386.deb
 2e9d49b0c4426151a3f6102c6e2d1cede1bb6a8b 315700 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_i386.deb
 d5de8f052ed229ba5e66115b7040f906ba51fc8a 1233780 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_i386.deb
 a1ad4fd520e02fee9fcedd1d6caec566e2b8080b 1541664 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_i386.deb
Checksums-Sha256:
 d43dc38d7f76b9ddffb7fa3bfd02dca743fe6e71698bf3ed93c2cc9ad15f7c5a 3631468 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_i386.deb
 31c5a78af62c598206f0337d412b1a0c021eb605585dc82f9d4c485a149e9a51 11232 graphicsmagick_1.4+really1.3.40-4+deb12u1_i386-buildd.buildinfo
 ad813e8ed7f247cc6221afff0a4419aa5788bf6c56ed2b6af72ebcc65af13397 1019696 graphicsmagick_1.4+really1.3.40-4+deb12u1_i386.deb
 608ea7e71ae90d3d87769f413c4657921b1b67e88761b5de3d79f8b7fcdab75f 64556 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_i386.deb
 5b8e0668a4f203bde1c26f12119d88ce21456fa2dff434bdbe384df6efd3540f 126088 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_i386.deb
 c45d3ceaa16aaea61adba60543936f74a3dc6259316d04ea858f694895fa265e 315700 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_i386.deb
 4fc842a1a41618f34945efe6529f2640a6ef9dde337bb7dc4f0a255b39193fe1 1233780 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_i386.deb
 c499bbaf4edea506d7eaa37fba0a6e87efde3f58ba787ac4bbafb14650f95c8f 1541664 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_i386.deb
Files:
 71fb0bcfc5bc0590f656c893d736e853 3631468 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_i386.deb
 0e5eae0550ce3699f2facc5c625da8f5 11232 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_i386-buildd.buildinfo
 abdcf739c4a8aa250ee836949a4d52bb 1019696 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_i386.deb
 9e6392769abb562a75ded421b6bf9995 64556 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_i386.deb
 3cfd4b3bd6983219a6ded6b2169831fd 126088 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_i386.deb
 338ad6de62538a0797d174b3c29eeb4f 315700 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_i386.deb
 b5bb80a8ddd474360f29b2dec55dce51 1233780 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_i386.deb
 4cc8680fbe6c2ed8159bf96e12e51fd4 1541664 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmf5iZEACgkQvGw9w6Vr
LCdwUxAAla7IbNYed1lcEd2vMJd9w0Zwvp3yHblPF6fbGY7QUPNIds9oj0gz1OVV
gRRr+2WsivYhqPAh0QJfXkCTp9QkXWAXr1Uz/0oNWNaJ6ZzzJPxep+DAmTbbNJj6
PeZlG/wKqlN6EE+7Ys9MyuewXUA6GB9xtAUsNc38/r1yVthOvs5bqBquDCIZWvch
CU8YxrQuM6lh5QLUpxdTJGu4mMG9W9sVdjptDEX3sMbeOgWWbjm6lunkXVfn6YpM
9fuLuU7XqROuwFgwtmi5jgbRO6g4p4jM3RCYVR+fpDo2+wQCDLgzg8WRqIw3HOVF
gzsV1caDgwqSgYbBSP1l1inUMyyJwW1vS26Y3pJITcI3LwwnRFmj6vLany9R4HgP
GtYxwWkF+Nz3gaMxuZPgCg88OgIPoWsfXg8MR1alhqULZvH7wVJOfSqSNHJqm0t1
ZazVyS1C+D6BLmNRahdw/AbmUzBCadNXv3O8lmhX6jcJ52HuOJ8xvF+/0+O0nzoy
wN/IyE/yMpwjaOG4TlLIlpilGDp46KpwXNqlfS0/yU9C4Jxtp27vO93tFqZb+wPO
mi3JjAX4YLuU8UXJNfLHRngc7WjAfjWLdVsGONeiW9CvBGBgRhEV7h185BWnCL/B
20AfGe6KEK8KrwHCZlvnxSWAoB0J1OkvjcNfuc6H2ck4TXPSfrQ=
=E6CX
-----END PGP SIGNATURE-----