-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 26 Nov 2018 19:03:02 +0100 Source: gnuplot Binary: gnuplot gnuplot-doc gnuplot-nox gnuplot-qt gnuplot-x11 gnuplot-tex gnuplot-data Architecture: source all amd64 Version: 4.6.6-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: gnuplot - Command-line driven interactive plotting program gnuplot-data - Command-line driven interactive plotting program. Data-files gnuplot-doc - Command-line driven interactive plotting program. Doc-package gnuplot-nox - Command-line driven interactive plotting program. No-X package gnuplot-qt - Command-line driven interactive plotting program. QT-package gnuplot-tex - Command-line driven interactive plotting program. Tex-files gnuplot-x11 - Command-line driven interactive plotting program. X-package Changes: gnuplot (4.6.6-2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2018-19490 * CVE-2018-19491 * CVE-2018-19492 Various overflow cases have been found by Tim Blazytko, Cornelius Aschermann, Sergej Schumilo, Nils Bars. Patch CVE-2018-19490-19491-19492.patch fixes corresponding upstream bugs: Bug 2088: term.c(strlen_tex) Bug 2089: metapost.trm tgif.trm (arbitrarily long font name) Bug 2092: cgm.trm overwrites trailing '\0' in default font name also context.trm emf.trm Bug 2094: also post.trm Bug 2093: datafile.c expand df_line on input as necessary to hold string data Bug 2095: eepic.trm (EEPIC_put_text) ignore request to print empty string Checksums-Sha1: e6446c19eefb929c5054228c3f9501f598a69bd0 2760 gnuplot_4.6.6-2+deb8u1.dsc 012bd22b7be32da186b6bb015c0c6d876926c90b 5059214 gnuplot_4.6.6.orig.tar.gz 2ca3d6e2994823a6ffbf774dcb45f5e749378c39 28148 gnuplot_4.6.6-2+deb8u1.debian.tar.xz d4d057060357147bb0fd7b80644a3c81b7412ce9 100438 gnuplot_4.6.6-2+deb8u1_all.deb 8f748e816b104bcbb2a0372b0c8168b02aee68e5 2840094 gnuplot-doc_4.6.6-2+deb8u1_all.deb ce23ee507a6506a1fa9e6afb2678ed007590ce3c 832104 gnuplot-nox_4.6.6-2+deb8u1_amd64.deb 66d22f776582f94a8c8ef4b65f79bd3732fe33de 952194 gnuplot-qt_4.6.6-2+deb8u1_amd64.deb cef95e3591991d062947cef5f81279f685f0842a 880870 gnuplot-x11_4.6.6-2+deb8u1_amd64.deb e02fb980f2ae686f3a01390440c1f7ab10e74c3a 103468 gnuplot-tex_4.6.6-2+deb8u1_all.deb 080e02083cd61853a6a9669a55726ce2fa8c3e23 148248 gnuplot-data_4.6.6-2+deb8u1_all.deb Checksums-Sha256: bbd32f9ba0dfd6ae0877a71af4c789118400667c87586a347bb259d79e8d7344 2760 gnuplot_4.6.6-2+deb8u1.dsc 1f19596fd09045f22225afbfec11fa91b9ad1d95b9f48406362f517d4f130274 5059214 gnuplot_4.6.6.orig.tar.gz 20f21f29f99dca64602bac7a28c09243e66d2bf432171d15d278ad0b4ef4691f 28148 gnuplot_4.6.6-2+deb8u1.debian.tar.xz 1dfccba312f22c2e5710c92519d8d56e48a1201484e0883418e2d2aecdf71a84 100438 gnuplot_4.6.6-2+deb8u1_all.deb bf2ab219d1f053f10142f982868ff5f0048f5745d2143ce48638bc7dbde5e21c 2840094 gnuplot-doc_4.6.6-2+deb8u1_all.deb 8468f4632f90120f745b880b8ae130bd98ec1fc92914e0c0971e2c524bba578d 832104 gnuplot-nox_4.6.6-2+deb8u1_amd64.deb 6ce31aea63577cbe22d150d317e08da6d5dc55f7b3d4db12e64c0ce0398b39b1 952194 gnuplot-qt_4.6.6-2+deb8u1_amd64.deb 4de6ed1a8dad70c906df6bb2172444e120b6a38e77a06d64dbe3e5027c132fcf 880870 gnuplot-x11_4.6.6-2+deb8u1_amd64.deb 4b3011a318d45b4b19d5f882482018e1b5c8c1a84e384d8840ad669bfb42237c 103468 gnuplot-tex_4.6.6-2+deb8u1_all.deb d6924c371ab7f91c93c2c330637f2a7b81c82f3681e17a3382123ac8ef8a110c 148248 gnuplot-data_4.6.6-2+deb8u1_all.deb Files: 78d0910a25376187b41d9384b3e8d424 2760 math optional gnuplot_4.6.6-2+deb8u1.dsc 02a980b37ba181f7510816ed6440c9c1 5059214 math optional gnuplot_4.6.6.orig.tar.gz b5be6ffeae70ccd5c78dfd93d5fa2f6e 28148 math optional gnuplot_4.6.6-2+deb8u1.debian.tar.xz c8f31aa7ea04fc5f11f6a98e6ad0cec5 100438 math optional gnuplot_4.6.6-2+deb8u1_all.deb 986e196d85b2ffcfde854878ab8ed4cb 2840094 doc optional gnuplot-doc_4.6.6-2+deb8u1_all.deb 4df9d1dec9a9ae09a04d35d060ad6b14 832104 math optional gnuplot-nox_4.6.6-2+deb8u1_amd64.deb e500bf509acb6f61ac35b28ef833f82e 952194 math optional gnuplot-qt_4.6.6-2+deb8u1_amd64.deb b70c9f3d9792286745995013f49984c8 880870 math optional gnuplot-x11_4.6.6-2+deb8u1_amd64.deb bb07e893a691942ee7ffb878a88da434 103468 doc optional gnuplot-tex_4.6.6-2+deb8u1_all.deb 3199e67ac35b460a7cb8e4ef1e99c7b6 148248 doc optional gnuplot-data_4.6.6-2+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlv8NzpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRwRKD/9NnoO0JT20QMO8wWhMDyL5gb6kDDpQ 6TeJJdRG2Sss+c1X9VpaboTkLjuIHnLnuoObre3MgY0JF2tha29h7Orv+BK5rHU8 bvEfLrYi4LQenqYEpNwKhFRuEXFUO+pVVzotCoK/PYhNJK0wFRBPwkWmOGx1yDHp C9szixvHGMM145JOrhYY1s7kd4kvdABSxqq0lT+o/FqT182oaT/s6cPAEayR3vqj DbqjwyphFjls9ZIe9oxjz4TUjePis5WweaHa/IkTGFcrUwPzN/aI0WvgEf0Um4AN aFeJTk5JBniAKA0268pzPo53NfW9Fzux/P56pejcNPx7QkT3L5tPP/bsgU3kH/Ha 5T6lTy53HLoF6niveeRYWQ460FEj6p25WKUvaddan6sDeZaukv1sIyA3X2/G+gRE PFSVSaUWp3qUJaTqar/cXsh201n9pQEjx2sv5Oz4k6Ozar1x8nV7qylv9GGfBxHB l+EV6dViWf6w9Nk9e48w8NnPedhdDlvtMVb8LpSXkNLqNdaI5DEmnNeG5oAKNqyM k2jlrxJRz0t8pyEXInJlo1ucZg3oCYAa16cm8CKg33KxqWdF2WUdvnRWUUUzrzkn 5C5ucxm9FJ0VkVVxEOJSY+ZACUVpKdRAhYxFQSvpAkUHnZtd/5H1KkGbmNOhr2Rk afNwfNmhqU+lsA== =Qr3H -----END PGP SIGNATURE-----
