-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 Nov 2018 19:03:02 +0100 Source: gnuplot5 Binary: gnuplot5 gnuplot5-doc gnuplot5-nox gnuplot5-qt gnuplot5-x11 gnuplot5-data Architecture: source all amd64 Version: 5.0.0~rc+dfsg2-1+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: gnuplot5 - Command-line driven interactive plotting program, version 5 gnuplot5-data - Command-line driven interactive plotting program. Data-files gnuplot5-doc - Command-line driven interactive plotting program. Doc-package gnuplot5-nox - Command-line driven interactive plotting program. No-X package gnuplot5-qt - Command-line driven interactive plotting program. QT-package gnuplot5-x11 - Command-line driven interactive plotting program. X-package Changes: gnuplot5 (5.0.0~rc+dfsg2-1+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2018-19490 * CVE-2018-19491 * CVE-2018-19492 Various overflow cases have been found by Tim Blazytko, Cornelius Aschermann, Sergej Schumilo, Nils Bars. Patch CVE-2018-19490-19491-19492.patch fixes corresponding upstream bugs: Bug 2088: term.c(strlen_tex) Bug 2089: metapost.trm tgif.trm (arbitrarily long font name) Bug 2092: cgm.trm overwrites trailing '\0' in default font name also context.trm emf.trm Bug 2094: also post.trm Bug 2093: datafile.c expand df_line on input as necessary to hold string data Bug 2095: eepic.trm (EEPIC_put_text) ignore request to print empty string Checksums-Sha1: 95feca5531f1075aa13cfff3efc1ff25677c9af1 2888 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.dsc 57271ab961bfaf353e2e3077640523bdbaaba6fa 2675827 gnuplot5_5.0.0~rc+dfsg2.orig.tar.gz d75796d972d674b91b7a5dac15e7eaf784a5f33d 18060 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.debian.tar.xz e25f7bc5852b7ddf50d8cefc64129e3c31ff6b35 22738 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1_all.deb aa1ff6d02ab06b94e264e2bafe82a2f2b04eb65d 2105220 gnuplot5-doc_5.0.0~rc+dfsg2-1+deb8u1_all.deb a63125e7173fe109b8701ea21e9edf9460460cd2 742150 gnuplot5-nox_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb d96147288e35fda8573084015724498b21512aac 904122 gnuplot5-qt_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb b235623a0314ebd617363a2558861ce36176bdd5 812814 gnuplot5-x11_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb 2e9a79b9c0992a98e6d852fc0366606e9681418b 76960 gnuplot5-data_5.0.0~rc+dfsg2-1+deb8u1_all.deb Checksums-Sha256: 75b88fa199b950f4d0c5601bbadf7ef12d7b3f9edb82348cfce5a9c4ffe3073e 2888 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.dsc 99b53c851725bf7d075233eaeaacc7bb255a4ed9f7671889960054b9ac57e3a2 2675827 gnuplot5_5.0.0~rc+dfsg2.orig.tar.gz 7312e3e6fca788acbe019693ab79bff68a3d303ad1b1abaa5a3e8773d1b24a6a 18060 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.debian.tar.xz c0eac8479a42424783c267cddda40f900351dcc82ef071d811cdd7955cce8f7e 22738 gnuplot5_5.0.0~rc+dfsg2-1+deb8u1_all.deb fc4cd993f3bae68ada60192ba6617e5fe671e22594f18f8b46323bcf6bd1a1c0 2105220 gnuplot5-doc_5.0.0~rc+dfsg2-1+deb8u1_all.deb 7e91018a4bc6e1f6b7703000b48a862bb54aa2a167b16d80435bbc0c26bc933b 742150 gnuplot5-nox_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb 2951c3f95df39e4e12c011ff194e26fd7f781f5a956e4fdabf7081e7d90aabda 904122 gnuplot5-qt_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb d6b4c3b50b5e7032ca755a6a1fd3d9e4536c0be9d3db1492e84cedad8a0b1d86 812814 gnuplot5-x11_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb 3b061ad49160a578a2c3fdcde1ba5fd831e00a56bb61725c5b38bbe78cfd0870 76960 gnuplot5-data_5.0.0~rc+dfsg2-1+deb8u1_all.deb Files: eb4d6eef99e5c2a6948ada5afefd851d 2888 math optional gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.dsc 7dce1260111ec9ad6c19ededc09d905d 2675827 math optional gnuplot5_5.0.0~rc+dfsg2.orig.tar.gz 3ed04c9514b34d3691656bf24a07ba74 18060 math optional gnuplot5_5.0.0~rc+dfsg2-1+deb8u1.debian.tar.xz 42796bc7b15f437e3d22e56a08a8d265 22738 math optional gnuplot5_5.0.0~rc+dfsg2-1+deb8u1_all.deb 455efc0a7843e34b3e4b225223b3f474 2105220 doc optional gnuplot5-doc_5.0.0~rc+dfsg2-1+deb8u1_all.deb 2e9212dad8f52407bbfbd4e8f695c1da 742150 math optional gnuplot5-nox_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb d016f639dd14e39611dabd644a1804ee 904122 math optional gnuplot5-qt_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb 2055bb2efeb1e7f4569497e1f067ffe4 812814 math optional gnuplot5-x11_5.0.0~rc+dfsg2-1+deb8u1_amd64.deb 3032a57801c87f14a6146d63af7d9e28 76960 doc optional gnuplot5-data_5.0.0~rc+dfsg2-1+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlv675dfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR606D/sHh/j/Q1o/en0E9Se9YpTkgT1QUHIa lQwOdIn0lWbf4Q8HMpLmSNEYSgmOUobY+/pbMYs7+0hJBzmaIe3GeLszhrlxTvR2 /w8L3dLun0JVEOc6dZMepyaCkBbwlC4Q9NifhUvKNJP1773LzYVqRoztzIaQ0n0l 9mRLrN08dX11fDGnFmjq1FNbDinARz8D+Dt280GuN5WB05jbnS4fomqurDoPui6s DMEk0SGzKfQBjDFRC4vh77521VGrRi3NFDtrQkIhZZTzJ6B42m7GtZqQlkVxwP8o P4/gVYyUTl33pOfe4npZz+qI/EfLGBp6uFgzu235vbm/Hzbc7bd5A/HDsYsLnowI 52DI5y6pb+1i65cvtxhhnFy+x66jqlz04x/CgzT2cxIzodU7EzvOGsCSZRObWnIy jB7tViRpJ3GyCwzIWRDn4AQ4QJZL8zaLBO38Gph/KPQxrghv8ce7BMf/kl9Jf+kb fY77ILbLwOXOMOhOsaTSF12TNbQm3FA4y4n6KHY29NdlmNcO5gz/4a3OxspP3qYu hOQH1TONj6LmmzXcMa5cSF/adOkYA/Ev4f9Ghy175l6xmWquPKkoCx0sojyrNhPa 0qezY+p/tcgw1DLDJwFrBvkKryta58tU7bHRvUbj9TBBhxjkAmP0pKrGu2ZB4TSQ 8SpL6gW6GdQfLg== =XzTc -----END PGP SIGNATURE-----
