-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 18 Mar 2019 14:45:00 -0400 Source: libjpeg-turbo Binary: libjpeg-dev libjpeg62-turbo-dev libjpeg62-turbo libjpeg62-turbo-dbg libturbojpeg1 libturbojpeg1-dbg libturbojpeg1-dev libjpeg-turbo-progs libjpeg-turbo-progs-dbg Architecture: source all amd64 Version: 1:1.3.1-12+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Ondřej Surý <ondrej@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: libjpeg-dev - Development files for the JPEG library [dummy package] libjpeg-turbo-progs - Programs for manipulating JPEG files libjpeg-turbo-progs-dbg - Programs for manipulating JPEG files (debugging symbols) libjpeg62-turbo - libjpeg-turbo JPEG runtime library libjpeg62-turbo-dbg - Debugging symbols for the libjpeg-turbo JPEG library libjpeg62-turbo-dev - Development files for the libjpeg-turbo JPEG library libturbojpeg1 - TurboJPEG runtime library - SIMD optimized libturbojpeg1-dbg - TurboJPEG runtime library - SIMD optimized (debugging symbols) libturbojpeg1-dev - Development files for the TurboJPEG library Closes: 924678 Changes: libjpeg-turbo (1:1.3.1-12+deb8u2) jessie-security; urgency=high . * CVE-2018-14498: Fix a denial of service vulnerability via a heap-based buffer overread that could be triggered by a specially-crafted bitmap file. (Closes: #924678) Checksums-Sha1: 320291d9eaef11805c34e22e870f8ea4066d2d31 2562 libjpeg-turbo_1.3.1-12+deb8u2.dsc 5fa19252e5ca992cfa40446a0210ceff55fbe468 1390282 libjpeg-turbo_1.3.1.orig.tar.gz f3562f301ba3a167a3ca4d2b9aec5e1a508ebc63 81956 libjpeg-turbo_1.3.1-12+deb8u2.debian.tar.xz 54619f36526bc8df73dab1037108502e973906a1 49706 libjpeg-dev_1.3.1-12+deb8u2_all.deb d349dfbdb9e709f2c0ac72ebb68f9bbcda5a1242 455828 libjpeg62-turbo-dev_1.3.1-12+deb8u2_amd64.deb 7600fb787bed3144af59411fc7bd2ccbae68d566 116762 libjpeg62-turbo_1.3.1-12+deb8u2_amd64.deb 8cf5d0215f7fccead397dd556b37572d08bb3bf7 318764 libjpeg62-turbo-dbg_1.3.1-12+deb8u2_amd64.deb 0af9e0cb94e9eff38cb16a07f41d7f1bb8117596 126990 libturbojpeg1_1.3.1-12+deb8u2_amd64.deb e8ac17278f1e9320a19e7324dff0814e2514ea0a 355070 libturbojpeg1-dbg_1.3.1-12+deb8u2_amd64.deb 1482ce2114442229ed655bb5b380155ffd2124d0 496508 libturbojpeg1-dev_1.3.1-12+deb8u2_amd64.deb 19bcf7a052427280a42a3c2ee25e3b3b0dd10e73 83386 libjpeg-turbo-progs_1.3.1-12+deb8u2_amd64.deb a43e8a80f5c17ef8e8c8d1c359339052d41aed37 188074 libjpeg-turbo-progs-dbg_1.3.1-12+deb8u2_amd64.deb Checksums-Sha256: fcf692f2e671abb057b6364af915e05ba2b1638c019305938f0e21e1bb94ad0e 2562 libjpeg-turbo_1.3.1-12+deb8u2.dsc c132907417ddc40ed552fe53d6b91d5fecbb14a356a60ddc7ea50d6be9666fb9 1390282 libjpeg-turbo_1.3.1.orig.tar.gz 7878e86dcfdc6239bc35bfecf5409fdd968f4f9b2e1979e60261854d788ddbda 81956 libjpeg-turbo_1.3.1-12+deb8u2.debian.tar.xz ec1287db036d61cb5d72a8a82295423e8ce459192e62a408b3c52b6f088f844f 49706 libjpeg-dev_1.3.1-12+deb8u2_all.deb 0e189cfacd978d8069a084a7d6a6e40b9e8cb7189239d7f540e48c535a2011a6 455828 libjpeg62-turbo-dev_1.3.1-12+deb8u2_amd64.deb 0853e63d525ed8ca9b30d8aad9018c6daefb65066ca532b0d4a96e9069bd0862 116762 libjpeg62-turbo_1.3.1-12+deb8u2_amd64.deb 7616b01b3cee0eaedcdd966ee60c6e50981f7eb575d9889cff0cacea829abd34 318764 libjpeg62-turbo-dbg_1.3.1-12+deb8u2_amd64.deb ecba128aa28c0e8685d8c85e1fa9dad70120a3f6c6d70c4cd3a27e3cc9889968 126990 libturbojpeg1_1.3.1-12+deb8u2_amd64.deb b945003d8772af3c26caef1a3193e7fb3a14ea6f8afa8bc5d4114cee795511ba 355070 libturbojpeg1-dbg_1.3.1-12+deb8u2_amd64.deb 45659084c505de23be6d469d80de098ea4da45a1a1f09c12d4d7fb20d95a9a34 496508 libturbojpeg1-dev_1.3.1-12+deb8u2_amd64.deb b01cea6f473e06bcbce0c03a5b9ca2b9a13810ef72eee933d890371a402eff50 83386 libjpeg-turbo-progs_1.3.1-12+deb8u2_amd64.deb fd75f20f15d13ec5fef5c29a16427e8f9130f1db9c30ee79f8554ef94db26dad 188074 libjpeg-turbo-progs-dbg_1.3.1-12+deb8u2_amd64.deb Files: 4014c4c5f9378fabc3ec4351098decf6 2562 graphics optional libjpeg-turbo_1.3.1-12+deb8u2.dsc 2c3a68129dac443a72815ff5bb374b05 1390282 graphics optional libjpeg-turbo_1.3.1.orig.tar.gz 9719a162f1be87822a3b414b79cfb4f6 81956 graphics optional libjpeg-turbo_1.3.1-12+deb8u2.debian.tar.xz c6efab2ab3f0e91812161862447e2e7a 49706 libdevel optional libjpeg-dev_1.3.1-12+deb8u2_all.deb ca64965c3056145c45e662fcf9d60d05 455828 libdevel optional libjpeg62-turbo-dev_1.3.1-12+deb8u2_amd64.deb 677323c15c73811f99f6e792f85c7a36 116762 libs optional libjpeg62-turbo_1.3.1-12+deb8u2_amd64.deb bd1c0a658a239606d8b8789c5df1f8a3 318764 debug extra libjpeg62-turbo-dbg_1.3.1-12+deb8u2_amd64.deb 7ff453f0bbe1ba8065e532d08d81318a 126990 libs optional libturbojpeg1_1.3.1-12+deb8u2_amd64.deb b7c3154c82ae6449ba1dc2bf947bdeb1 355070 debug extra libturbojpeg1-dbg_1.3.1-12+deb8u2_amd64.deb 564db6e7759ced832c7d629632196650 496508 libdevel optional libturbojpeg1-dev_1.3.1-12+deb8u2_amd64.deb 51830d6f2d5632713f8e49e5a94f28a8 83386 graphics optional libjpeg-turbo-progs_1.3.1-12+deb8u2_amd64.deb f0fa668f2e2d7db134454f7361c77475 188074 debug extra libjpeg-turbo-progs-dbg_1.3.1-12+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlyP7UwACgkQHpU+J9Qx HlhURA/+ImIRfrq3qNzP1E1hOpGe8ikRs4bgXfB/QCbrLJf3NpOjYTrCW6RS4YeC jr0d1Ggb+xXXc6jeT8S8Mdjwb1FTBj2cFZUQoU8YnSeABNYhXYeid0wDTT9PwNvE DHMDegJb5B9f8QhNHHmubJ0Sig7K+Z/Owo2+5J0bqtAy2mhhTzH79MTwlIW/r8F4 nCy8kS7+EHvefEaiDsTul4PMPtSJ6znHXah39d4GeTBQXI1ooa2/V188C5VzSh/c tWeIt97bwPW0Co6mau+X9rvxLgM4If70o5E97Xj7J/2fR/tHwBYjvaiXyQMYZf+M 0IQjUBaQorMwk8NMnZ3VRQ96osdkHTXW0iacvKrUGHo66drrLb8yNk4w6p8ENa4P wajJfg1gmPu/+6uQZfURbsMVT08RsSL+/qJYQOipBc1ZgQQwNiMJzo0RKlxH8Zai +FwXWO9fzvtY0D6ofwJfFyY0ueJ88R7SCf6s/c4sx/L2zwtQ/NYGx3SG3Xc2IWYU heVayzHiRLq9eSurkZAp/+8I2VaXKrYCNjXfFY5N6KeqvOAAc4rv0tx+WgpUsYfy kdYG1FmKMrfsovYt5uIrodX/TGbJss7vj12D9AWceIOWGoZvMVxXB/lhekVMvW3d RMN+hAZ2Asnp5AUUyECqLCuKuk4nAvkzwCmyX5p9zTjGAWa68Mw= =pqWN -----END PGP SIGNATURE-----