-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Aug 2019 19:04:02 +0200 Source: djvulibre Binary: libdjvulibre-dev libdjvulibre21 libdjvulibre-text djvulibre-dbg djvulibre-desktop djview djview3 djvuserve djvulibre-bin Architecture: source amd64 all Version: 3.5.25.4-4+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Barak A. Pearlmutter <bap@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: djview - Transition package, djview3 to djview4 djview3 - Transition package, djview3 to djview4 djvulibre-bin - Utilities for the DjVu image format djvulibre-dbg - Debug symbols for the DjVu image format djvulibre-desktop - Desktop support for the DjVu image format djvuserve - CGI program for unbundling DjVu files on the fly libdjvulibre-dev - Development files for the DjVu image format libdjvulibre-text - Linguistic support files for libdjvulibre libdjvulibre21 - Runtime support for the DjVu image format Changes: djvulibre (3.5.25.4-4+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2019-15142 heap-buffer-overflow when reading a crafted file * CVE-2019-15143 infinite loop that can be triggered by crafted file * CVE-2019-15144 stack-overflow error when processing a crafted file * CVE-2019-15145 invalid read error when reading a crafted file Checksums-Sha1: 836d3c5c6018ad76d9c5f63b8c5da8b5e4d26485 2646 djvulibre_3.5.25.4-4+deb8u1.dsc c7044201703f30df0f1732c54c6544467412811d 3575460 djvulibre_3.5.25.4.orig.tar.gz 7b9fe765e0a5f2da13bee0387aeb1a22dfc472eb 83912 djvulibre_3.5.25.4-4+deb8u1.debian.tar.xz 2a852d1371ca0b040f2a5cd0de64d3cbdd42c8cf 2383894 libdjvulibre-dev_3.5.25.4-4+deb8u1_amd64.deb 9aa7567ae004bea6a6c1410a4de9fd1421991722 578724 libdjvulibre21_3.5.25.4-4+deb8u1_amd64.deb a3ac2e8e439663e79eca2a0a902d38f0d3ca1888 60188 libdjvulibre-text_3.5.25.4-4+deb8u1_all.deb dc40cc3820d459392922bd3ae205c1263050601b 93134 djvulibre-dbg_3.5.25.4-4+deb8u1_amd64.deb 51b0cfc1a9a2a06ddf5a54070db6cc05113372d9 35016 djvulibre-desktop_3.5.25.4-4+deb8u1_all.deb f335f391868984b872d4d7aad8b9030633d58659 15924 djview_3.5.25.4-4+deb8u1_amd64.deb 368254cbf5a7ce8ec839ec0d7189a4a045e26107 15924 djview3_3.5.25.4-4+deb8u1_amd64.deb 9afce241524dd34f047579e05c21c814c807c0fe 33012 djvuserve_3.5.25.4-4+deb8u1_amd64.deb 83163cec3ebab2005724161b0414f295129bf07c 283552 djvulibre-bin_3.5.25.4-4+deb8u1_amd64.deb Checksums-Sha256: 1df07686a48d19bbde8c1aa5b074c70fb501ba17731b790db62d72983deaa5f9 2646 djvulibre_3.5.25.4-4+deb8u1.dsc 6d8b3414d8ec87c5a40d3dde6fee54beebee6cbf6ec56aa7851dfbca9aaa3f36 3575460 djvulibre_3.5.25.4.orig.tar.gz 11a972cb069d96a63ba3a3a313c2e8142e4384bcb657e1398b6dfa5eb4fd19f8 83912 djvulibre_3.5.25.4-4+deb8u1.debian.tar.xz 0462bcf3c5eb4f1455806a871e54a101e44f5676420e9405cea95366dc4b5035 2383894 libdjvulibre-dev_3.5.25.4-4+deb8u1_amd64.deb dde9ac197173f9566fa2c777518c6a36ecc263714b297f6534a793e40464e518 578724 libdjvulibre21_3.5.25.4-4+deb8u1_amd64.deb 1c90cf8c73e19944ab5d6e14d3d90a03fccc2eefdf23203641592750a317c36c 60188 libdjvulibre-text_3.5.25.4-4+deb8u1_all.deb dffd51af24141470a59c2dc977d7794ad40148689b3d288b0545fa1502fc4050 93134 djvulibre-dbg_3.5.25.4-4+deb8u1_amd64.deb 07e86055bbcf8898768bd26344db8ffd0a0085e124da5f5bfdd4d435f08d2920 35016 djvulibre-desktop_3.5.25.4-4+deb8u1_all.deb 1add56c08d29f7a4b1a72a8a01d7542cad589aeb5845708c857fbb90cc437c69 15924 djview_3.5.25.4-4+deb8u1_amd64.deb f972dc7beaa908cb934b02c49159ab931365dbf59605097f4b85732b88b53aac 15924 djview3_3.5.25.4-4+deb8u1_amd64.deb db91a7e676647c35b72e82693199b83144c451558017a7a543e80e206b1e2b67 33012 djvuserve_3.5.25.4-4+deb8u1_amd64.deb ea5b0f598ad48e3da1117885ddb458db3638f97cc9ee5e5836f368a0c8380663 283552 djvulibre-bin_3.5.25.4-4+deb8u1_amd64.deb Files: 4e5e26f34d87e18817d69f3674bd6e7d 2646 libs optional djvulibre_3.5.25.4-4+deb8u1.dsc 0a7ab14f159fcf53cd3743a1514e8a9c 3575460 libs optional djvulibre_3.5.25.4.orig.tar.gz dc690eaedf2a7d710cbfde6b4073bb12 83912 libs optional djvulibre_3.5.25.4-4+deb8u1.debian.tar.xz d0f7ff729532efb83cad7328e1043b25 2383894 libdevel optional libdjvulibre-dev_3.5.25.4-4+deb8u1_amd64.deb 2bd955518b11b019cc49fb8d61c1d9e9 578724 libs optional libdjvulibre21_3.5.25.4-4+deb8u1_amd64.deb c8773ab39c4578212b6a8195dc43f0d1 60188 libs optional libdjvulibre-text_3.5.25.4-4+deb8u1_all.deb af0916f058e93a136e754a0bb0aea46a 93134 debug extra djvulibre-dbg_3.5.25.4-4+deb8u1_amd64.deb 574a6c5ff503f818f075401076ff64a0 35016 libs optional djvulibre-desktop_3.5.25.4-4+deb8u1_all.deb fcc9842da733619579e6d250827da5d7 15924 graphics optional djview_3.5.25.4-4+deb8u1_amd64.deb f2e4eccbfff1b722af56b44ae17271b2 15924 graphics optional djview3_3.5.25.4-4+deb8u1_amd64.deb c60e98baa2565b326c875d2afacf98c6 33012 web optional djvuserve_3.5.25.4-4+deb8u1_amd64.deb 8983a1d079841325f1bb273ab67cd274 283552 graphics optional djvulibre-bin_3.5.25.4-4+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl1oD8VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR0krD/9lT4YCbhOFCdu9g3bvb+Ji+gc+qPgc 18sLa+/T/+tHh7B7cG/l3xuL6/CrxsbmGmHr+Zo3mAieeNIJNFIhbKcW1QM8lIcu TxqzDXw/S2Aoj8Pl5EQ4XN+hSX2bkabDfGnyMgvNwCU//yLsFty6czM7azdkqVIw TkLJWf016nyB4SmIvm9c7t1qb2Sbl4aaHRgdXao38Oy0g6NRp3L4TzUPmdiIx3hr gOpahRIOQ6PIO0EFYR595YO356pFXXIR81QvOkjosefgh9WHed6Dbw6yT7jxuH1d U+GFuntT/dPW7rIbxNfsVzBalSk2MVUT5Xt+2gO9dS/GZiajLeq9/NHpr1Q6VE8+ AwJj2nLyjJXJOvCDm7n4ZT0vFo6DiclXZTX2WVy/9pr2nGZXgpeuzpPl0V5j/tkR 0XU26s/fggalQH2mwZMeyMDvtwuqvjPtC+tKMIBG7sEJplW4/3jxAUINh0MV5IrJ jGX7Zlg6RQr2HD++yQgAQEJDu66oCVlqygM5/yb76e8hfMKebPwuBaq19YInM1GB X6vTElAGbDX3lI8XimqjGgO75bx27fPkJsgpTN8PENrffCIkjnAKhgnEqIhMbMDe wgjc0IWLrlcvTsXyzKGEfuj8RSTmrTGT5IZIFxQLqu/A6jzdYDql7BU2N4n4sn0h dFtkePloqIHtPg== =K7Q0 -----END PGP SIGNATURE-----
