From: Raspbian automatic forward porter Date: Wed, 14 Oct 2026 16:13:11 +0000 (+0100) Subject: Merge version 1.4+really1.3.48-2+rpi1 and 1.4+really1.3.49-1 to produce 1.4+really1... X-Git-Tag: archive/raspbian/1.4+really1.3.49-1+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=1acd09ac455b271c5b7c4b2a678b3275e50b58b8;p=graphicsmagick.git Merge version 1.4+really1.3.48-2+rpi1 and 1.4+really1.3.49-1 to produce 1.4+really1.3.49-1+rpi1 --- 1acd09ac455b271c5b7c4b2a678b3275e50b58b8 diff --cc debian/changelog index bdbca59,2492e2f..1d92089 --- a/debian/changelog +++ b/debian/changelog @@@ -1,12 -1,13 +1,23 @@@ - graphicsmagick (1.4+really1.3.48-2+rpi1) forky-staging; urgency=medium ++graphicsmagick (1.4+really1.3.49-1+rpi1) forky-staging; urgency=medium + + [changes brought forward from 1.4+really1.3.36-1+rpi1 by Peter Michael Green at Wed, 30 Dec 2020 03:11:26 +0000] + * Ignore test failures, the tests fail on 64-bit kernels. + + [changes brought forward from 1.4+really1.3.40-1+rpi2 by Peter Michael Green at Thu, 19 Jan 2023 18:12:16 +0000] + * Remove hardcoded dependency on libtiff5 (Closes: #1029212) + - -- Raspbian forward porter Tue, 13 Oct 2026 06:15:58 +0000 ++ -- Raspbian forward porter Wed, 14 Oct 2026 16:13:10 +0000 ++ + graphicsmagick (1.4+really1.3.49-1) unstable; urgency=high + + * New upstream release: + - fixes CVE-2025-55154: guard against integer overflow and underflow + in MNG MAGN chunk handling, + - fixes CVE-2026-56379: command injection vulnerability in the SVG + decoder, + - fixes CVE-2026-61464: heap-based buffer over-write vulnerability. + + -- Laszlo Boszormenyi (GCS) Sun, 11 Oct 2026 09:14:32 +0200 graphicsmagick (1.4+really1.3.48-2) unstable; urgency=high