[Pkg-gmagick-im-team] imagemagick_7.1.2.31+dfsg1-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 10 Sep 2026 21:38:59 +0200
Source: imagemagick
Architecture: source
Version: 8:7.1.2.31+dfsg1-1
Distribution: unstable
Urgency: high
Maintainer: ImageMagick Packaging Team <pkg-gmagick-im-team at lists.alioth.debian.org>
Changed-By: Bastien Roucariès <rouca at debian.org>
Closes: 1147176
Changes:
 imagemagick (8:7.1.2.31+dfsg1-1) unstable; urgency=high
 .
   * New upstream version (Closes: #1147176)
   * Fix CVE-2026-86420:
     ImageMagick fails to properly lower the memory budget
     when an operation inside OpenPixelCache fails.
   * Fix CVE-2026-86421:
     A memory leak in the MSL image decoder. A crafted MSL image
     triggers memory allocation without proper deallocation,
     allowing an attacker to exhaust memory and cause a denial of service.
   * Fix CVE-2026-86423:
     a heap-use-after-free vulnerability in the GetList method of PerlMagick.
   * Fix CVE-2026-86424:
     A time-of-check-time-of-use (TOCTOU) vulnerability in the video
     decoder that allows attackers to bypass path policy write restrictions via symlink swaps
   * Fix CVE-2026-86425:
     A heap-use-after-free vulnerability in the Layer method of PerlMagick.
Checksums-Sha1:
 77b9bd65c44032de9039c52888c4b245db7f880d 5227 imagemagick_7.1.2.31+dfsg1-1.dsc
 e6126f4101acd1cb76c00c20e6c2b3208396ebe1 10221556 imagemagick_7.1.2.31+dfsg1.orig.tar.xz
 5b21c5864cce6004549c67fd7811e368a56150ed 263044 imagemagick_7.1.2.31+dfsg1-1.debian.tar.xz
 d51fc42199213a3345cad4fb4a230679a236ac51 8881 imagemagick_7.1.2.31+dfsg1-1_source.buildinfo
Checksums-Sha256:
 3d07e8dc2215e0489924b0586e6119e80f2a6b9c7868bab54f717a1ccb0bd5d7 5227 imagemagick_7.1.2.31+dfsg1-1.dsc
 a24aca5eac73d22201169e6a68550ccf2dae5993a4209757c42c23884961d988 10221556 imagemagick_7.1.2.31+dfsg1.orig.tar.xz
 2ade424bf2e06e755e8e34496ce139c5296959679aefcd89157a07ac8677bf22 263044 imagemagick_7.1.2.31+dfsg1-1.debian.tar.xz
 dd6e55a3867765a71a1834c9937f2e64aa4985beece2367dda5cf2f93fe97177 8881 imagemagick_7.1.2.31+dfsg1-1_source.buildinfo
Files:
 dcdfd12316fab46757f6edbf49c75968 5227 graphics optional imagemagick_7.1.2.31+dfsg1-1.dsc
 f655cf2d9c56d456afafb8a667ea2430 10221556 graphics optional imagemagick_7.1.2.31+dfsg1.orig.tar.xz
 b0477f34d2b9d1c68b08d37d39dbeec4 263044 graphics optional imagemagick_7.1.2.31+dfsg1-1.debian.tar.xz
 49cdbd5de804f0808d4ebb169e28d791 8881 graphics optional imagemagick_7.1.2.31+dfsg1-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vigW
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gmagick-im-team/attachments/20260910/7ecb2916/attachment.sig>