-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Jun 2019 17:24:57 +0200 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 libgd-dbg libgd2-xpm-dev libgd2-noxpm-dev Architecture: source amd64 Version: 2.1.0-5+deb8u13 Distribution: jessie-security Urgency: high Maintainer: GD team <pkg-gd-devel@lists.alioth.debian.org> Changed-By: Jonas Meurer <jonas@freesources.org> Description: libgd-dbg - Debug symbols for GD Graphics Library libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd2-noxpm-dev - GD Graphics Library (transitional package) libgd2-xpm-dev - GD Graphics Library (transitional package) libgd3 - GD Graphics Library Closes: 929821 Changes: libgd2 (2.1.0-5+deb8u13) jessie-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * Fix CVE-2019-11038: Uninitialized read in gdImageCreateFromXbm (Closes: #929821) Checksums-Sha1: a484a2bc525cc356b37e919df3789467bf8533b6 2355 libgd2_2.1.0-5+deb8u13.dsc 0b2914feaf0ea96838ff754c68056a482596aa49 43028 libgd2_2.1.0-5+deb8u13.debian.tar.xz dfa281c1d057bb3abee66724ca15994827f53178 42994 libgd-tools_2.1.0-5+deb8u13_amd64.deb a52a3820814fb94f40fd93d1352ec3188f6b866a 287934 libgd-dev_2.1.0-5+deb8u13_amd64.deb eb1ea68b6ece748048f558f1f4d300f795716559 148750 libgd3_2.1.0-5+deb8u13_amd64.deb 6a0d1fa2bc0871695dd392c1355158a90a5d27d7 315186 libgd-dbg_2.1.0-5+deb8u13_amd64.deb cd412371bda5a6ac922a9e6703c673e3b4370708 1230 libgd2-xpm-dev_2.1.0-5+deb8u13_amd64.deb 5b7252c07551a1703ede68faa67586c5fe25c09a 1236 libgd2-noxpm-dev_2.1.0-5+deb8u13_amd64.deb Checksums-Sha256: 13e8b95fd91a2f94e4ead5d72bfab11af75a542ac5bac7ad8f28a7cfdf8bce9b 2355 libgd2_2.1.0-5+deb8u13.dsc 943ab2fc94c1193a4d02bf40c4f34cc12da446315dff29bb95804a706b3c4101 43028 libgd2_2.1.0-5+deb8u13.debian.tar.xz 7567b325c9c85d772b6eda8bc1d5747a5cf960b31edfb15e5c0383d7363e7777 42994 libgd-tools_2.1.0-5+deb8u13_amd64.deb aa33383ca1d94dc89a78bdefb7a77ff7720417409d8425c558853d19e1809af8 287934 libgd-dev_2.1.0-5+deb8u13_amd64.deb c17f59a193b37c0b96e61f2fd7297f897f831522f2402741e79200ba6c4aaa1f 148750 libgd3_2.1.0-5+deb8u13_amd64.deb 9484eecb5adb9130997aee2c20edf4c2eb0af1a0ec15de6731defc4a961d51c0 315186 libgd-dbg_2.1.0-5+deb8u13_amd64.deb 0915d5b5eda4a97b7e05058eafc0062f756a47a9dfe63c2e1fe8604d58dc4690 1230 libgd2-xpm-dev_2.1.0-5+deb8u13_amd64.deb a2ed08f9b0db3f73f41e9703a7ebeccc58f7a3d90681285e11f1944f60256246 1236 libgd2-noxpm-dev_2.1.0-5+deb8u13_amd64.deb Files: 9ee48c10d47bed6230af26fdd8e4d443 2355 graphics optional libgd2_2.1.0-5+deb8u13.dsc 5a987d706ec5202edbe3f077c7a7828d 43028 graphics optional libgd2_2.1.0-5+deb8u13.debian.tar.xz 50a83d1199794572e6248c5cc103be08 42994 graphics optional libgd-tools_2.1.0-5+deb8u13_amd64.deb 7fe99951fb4d30e1eac1802168e4f165 287934 libdevel optional libgd-dev_2.1.0-5+deb8u13_amd64.deb 74b24e6bf55b2d5ca9d1f48c56c18d34 148750 libs optional libgd3_2.1.0-5+deb8u13_amd64.deb f2d7d506d0427b779b08ef57f34c97f3 315186 debug extra libgd-dbg_2.1.0-5+deb8u13_amd64.deb 720452fbd19fef054c3ebf05fd0f7d58 1230 oldlibs extra libgd2-xpm-dev_2.1.0-5+deb8u13_amd64.deb 8f89b9daf425b1b529c21592d17a09e9 1236 oldlibs extra libgd2-noxpm-dev_2.1.0-5+deb8u13_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELIzSg9Pv30M4kOeDUmLn/0kQSf4FAlz/y90ACgkQUmLn/0kQ Sf7pxw/+MSW1CBBn78/n3an+eVzTc2OUAfN+oSixVjHZ0nKXmpDiWErNSXiZAsYD bjOtsZxlATl8r0i/Lw82afTq0QG7nGK9Kk8kY+HajvN19njKvjcS/QCRKEG8Ny0f 5VfKpo4WCkRTViQdPEGgZYfeOVAMYY7yi6FpTWHOPV7aDj0cozS3ETHXY6DdKFul JFz6Suwd+0b1402Tr+V7IjIUDZ0TUEZSyeEKl7W8YQr6iUwmd+kOTO2OC45+t6sm g5WpX2HEaANfQYJjbBj8e7pazRttGoYzcEjmoOTH7fR0w3xKujorFcxIjX8mnAFw X+CkgQHSCsKyXXt9IGh9Xh+r+Rrzo0/jPRtL+Q7GTSEhiCz18aN9xU/jF8RNJHV2 K2QUqKE6zVccMjfdNtmCFDc8Jym4K0KPGWERmTlEbCLVoEIOsqhVEOmmSZ9VXN0N Y9VkElLZlxTqZnVNmoY33J5oF8Qpgv/gZqtBDicWHg9lO0OONdu1nhFeXRp+LAPt Q3wflM2sq0zwecky6NW5a7118Z5FpmvdeKKmz84Fu0UyEQX0mc114Lb6O85lIQRl UJ0D+RM4m5U9rcBgyD2+QKyWnCAj10jmrVKSFwMeHSKSAgYUOfFowTw8WAM7CfT8 jAvo5nYiZtjsW5hwY4EW3RjrI/MXQz3NIc4wI3Tt7kfZpHlW3UY= =Lxaz -----END PGP SIGNATURE-----