Accepted graphicsmagick 1.3.16-1.1+deb7u2 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 02 Jun 2016 09:33:03 +0200
Source: graphicsmagick
Binary: graphicsmagick libgraphicsmagick3 libgraphicsmagick1-dev libgraphicsmagick++3 libgraphicsmagick++1-dev libgraphics-magick-perl graphicsmagick-imagemagick-compat graphicsmagick-libmagick-dev-compat graphicsmagick-dbg
Architecture: source amd64 all
Version: 1.3.16-1.1+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Daniel Kobras <kobras@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
graphicsmagick - collection of image processing tools
graphicsmagick-dbg - format-independent image processing - debugging symbols
graphicsmagick-imagemagick-compat - image processing tools providing ImageMagick interface
graphicsmagick-libmagick-dev-compat - image processing libraries providing ImageMagick interface
libgraphics-magick-perl - format-independent image processing - perl interface
libgraphicsmagick++1-dev - format-independent image processing - C++ development files
libgraphicsmagick++3 - format-independent image processing - C++ shared library
libgraphicsmagick1-dev - format-independent image processing - C development files
libgraphicsmagick3 - format-independent image processing - C shared library
Changes:
graphicsmagick (1.3.16-1.1+deb7u2) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* CVE-2016-5118:
Disable support for reading input from a shell command, or writing output
to a shell command. This was done by the pipe (|) prefix. It was possible
to perform a command injection because graphicsmagick used popen.
Checksums-Sha1:
912eda74b111821689c52e52b7e24a44c85dd281 2789 graphicsmagick_1.3.16-1.1+deb7u2.dsc
becce69f1ca4d0f71af8348d4a297596533eb566 175613 graphicsmagick_1.3.16-1.1+deb7u2.diff.gz
d05d001dec81e4b82e94db48f7db3b9d1dfbb98f 1031744 graphicsmagick_1.3.16-1.1+deb7u2_amd64.deb
3f1238f9f2d5b05a2b7d182ed8eadac072b49e6b 1323678 libgraphicsmagick3_1.3.16-1.1+deb7u2_amd64.deb
7ac39f324348053e0787c281c8b09f30d0e08eb9 1818570 libgraphicsmagick1-dev_1.3.16-1.1+deb7u2_amd64.deb
fb04203cd4a866bc25cc99fe0ebcd546466695d7 154162 libgraphicsmagick++3_1.3.16-1.1+deb7u2_amd64.deb
344f410079594f8a21e883d8ea907f44e1cccee6 407652 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u2_amd64.deb
2eafe4443e0ee463c839e73a0f78d00bca508681 83200 libgraphics-magick-perl_1.3.16-1.1+deb7u2_amd64.deb
374a21463caa26dbdf3dc8406f4cd46745832d66 3264034 graphicsmagick-dbg_1.3.16-1.1+deb7u2_amd64.deb
c858ccf41516c16657c03a69dfcaa2fdefd98bf8 17332 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u2_all.deb
007331c353dbc0fcd137706139b4604dcfaee7fd 20774 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u2_all.deb
Checksums-Sha256:
0a22e2b67699c45b04c7e70a7f45a2a1b8ff755aa08fad9cad91d000bb66d5c0 2789 graphicsmagick_1.3.16-1.1+deb7u2.dsc
a9973ceb5f9ceb779016b8469a3ced89a41a1b63c41563d9cca30f5766bf8718 175613 graphicsmagick_1.3.16-1.1+deb7u2.diff.gz
389de7048d1173597a7f659cd3fc51d2bb32d1c861c613e1696a8445234aaa3d 1031744 graphicsmagick_1.3.16-1.1+deb7u2_amd64.deb
84f2d671aeabd9e6e6cbb1078977b9e8f135f353516393e00e0ad7fe45a51859 1323678 libgraphicsmagick3_1.3.16-1.1+deb7u2_amd64.deb
ee4846eaa18c0b25842b4d9228597c72facb9268cc8a7423ff30a90749d81e73 1818570 libgraphicsmagick1-dev_1.3.16-1.1+deb7u2_amd64.deb
4306114e6c6efee892798662537381c5b819633e46e85efce4dc5ad6ac7d840c 154162 libgraphicsmagick++3_1.3.16-1.1+deb7u2_amd64.deb
bdbed91a1e87578fa5fcb2350b3db49bd76ac7b239d3dd8fab76bf9b24b97336 407652 libgraphicsmagick++1-dev_1.3.16-1.1+deb7u2_amd64.deb
6b5a6d06965d3dfc25e2ff68cd6e5c0b103ff7416d26e5b47d013509f977f5ac 83200 libgraphics-magick-perl_1.3.16-1.1+deb7u2_amd64.deb
d063f1d1a14342b718df1cd6049f4eec0234206800242279b649cdf702d7de46 3264034 graphicsmagick-dbg_1.3.16-1.1+deb7u2_amd64.deb
334f89a146910930df9cef6e3bff7235845bb26aa1f73c7850462d8aaec607d6 17332 graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u2_all.deb
b782abda852fe75fdd7d2dab7c2b44eea84f9f29eb258bd5e961113f87175e46 20774 graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u2_all.deb
Files:
2a0c9c381318676751fba5a8dba726aa 2789 graphics optional graphicsmagick_1.3.16-1.1+deb7u2.dsc
1fa921bdd33af7cae55c8432863c13fd 175613 graphics optional graphicsmagick_1.3.16-1.1+deb7u2.diff.gz
8befe97820c3555be29f602e8f7d16d5 1031744 graphics optional graphicsmagick_1.3.16-1.1+deb7u2_amd64.deb
8543bb23f84d93e74ef08a3306f9dd45 1323678 libs optional libgraphicsmagick3_1.3.16-1.1+deb7u2_amd64.deb
3d0b01658df2c5961d935cd42115c218 1818570 libdevel optional libgraphicsmagick1-dev_1.3.16-1.1+deb7u2_amd64.deb
a102ec8abf67c865060a9f1b43da9e76 154162 libs optional libgraphicsmagick++3_1.3.16-1.1+deb7u2_amd64.deb
8ee141c20fbf3b4a6638a92329252b6e 407652 libdevel optional libgraphicsmagick++1-dev_1.3.16-1.1+deb7u2_amd64.deb
48c16a7aa8d27b9240f059814c9bc755 83200 perl optional libgraphics-magick-perl_1.3.16-1.1+deb7u2_amd64.deb
f2bcdcf4d4beaa8c3059cb99131aa810 3264034 debug extra graphicsmagick-dbg_1.3.16-1.1+deb7u2_amd64.deb
56c17ec094a5cd96e6cbb1e21ec6f64a 17332 graphics extra graphicsmagick-imagemagick-compat_1.3.16-1.1+deb7u2_all.deb
fc93f149ea2f386b4e4a995620f01025 20774 graphics extra graphicsmagick-libmagick-dev-compat_1.3.16-1.1+deb7u2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQJ8BAEBCgBmBQJXT+pOXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBQ0YzRDA4OEVGMzJFREVGNkExQTgzNUZE
OUFEMTRCOTUxM0I1MUU0AAoJENmtFLlRO1Hknb8P/3V9T69gNhGiqBdDv+tf0ikH
mLg5bj4akP1iC+AuFtcISrxDeZq/Mp2mhyEDnPbmVczPIfo48D9QeC4vchy1705N
HI+MgTULorbkxvXz9LxjTqH7uzlwDkU2UXNQXI6S2Onp9s3MzLvDuhuFA8yL/8rx
R231cSUXcqLIAiph5itjg+s/oxA+iF2CFgt6c09wlvtoSaXVIMzOfee/o6fe0G7f
hUOtZUa5pIpsiuU1qcIxFEKrh1pWhRkY0XjhbmAJJqakgD0NQbK1cEAwQJQozjxi
IHpZX4SrRB+Li1cxVRsAnUH0fFL8+Y7ExvuRyXvngQxn3ICOGXk/oFCJHulG4982
TLIGl3kNOscMk0VfxePD+FySF0f9KIGKy9r+yUQUmiS0fiXeiMWWbSE/5sxkoDv8
6pww+QYMg2ZoGUwSoTEeECC9r6TTAn+x2vHGegNup562PMry6AP7GE4SR4G416Gi
iP4Yd0piLBzSOGYeHU5YgsXcJX8Ouazv2+SZkDiXbPC+OtDURAtvISECpfgdDVEm
ohwWi4xrq6EWI4YGHFbUdTUNizYocOcPE3EsnmIEAoKZ3uU3UqR+cMhAMFt8BiUe
KwCW0doQPMgoRGCV9kvGnYowOBWb+qrrsiy4oF1XQkdwJ8vXnX4GfviHIUc8oa0n
bpN3VC3XPja0jdfEbiP7
=VCD4
-----END PGP SIGNATURE-----
Reply to: