-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Aug 2019 19:36:27 +0200 Source: libextractor Binary: libextractor3 libextractor-dbg libextractor-dev extract Architecture: source amd64 Version: 1:1.3-2+deb8u5 Distribution: jessie-security Urgency: high Maintainer: Bertrand Marc <beberking@gmail.com> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: extract - displays meta-data from files of arbitrary type libextractor-dbg - extracts meta-data from files of arbitrary type (debug) libextractor-dev - extracts meta-data from files of arbitrary type (development) libextractor3 - extracts meta-data from files of arbitrary type (library) Changes: libextractor (1:1.3-2+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * CVE-2019-15531 A crafted file could result in a heap-buffer-overflow vulneribility in function EXTRACTOR_dvi_extract_method in dvi_extractor.c. Checksums-Sha1: 3234cb172edf28f787d16d78b50ed2dcaa36151b 2702 libextractor_1.3-2+deb8u5.dsc 613d0b80e83c79c3e05e073bcda0d0d0bd1f3336 7942021 libextractor_1.3.orig.tar.gz 0c22040bd648db37638f3727e47b06dfc05fa29e 18932 libextractor_1.3-2+deb8u5.debian.tar.xz 3af6c52d93fd4a344b9691d1da1130448df7d937 113288 libextractor3_1.3-2+deb8u5_amd64.deb 4272b3cfeb4dba458671d0d0dfc562f9be06263f 450814 libextractor-dbg_1.3-2+deb8u5_amd64.deb 4e468ad3bf12b4ea1936e9555ce21a2dbde588ba 26250 libextractor-dev_1.3-2+deb8u5_amd64.deb 528a812fe3719d372b19410f9e42994a7f8a6dea 90784 extract_1.3-2+deb8u5_amd64.deb Checksums-Sha256: b93b16675ce5217d3ad9ed1c19e85658e4503264a0467c1061d237bd3f9da3ec 2702 libextractor_1.3-2+deb8u5.dsc 868ad64c9a056d6b923d451d746935bffb1ddf5d89c3eb4f67d786001a3f7b7f 7942021 libextractor_1.3.orig.tar.gz ff32469eb46a8e1221a6e5fd92d57ef10e20abdfd0383a2a0a0a810d4fe94daf 18932 libextractor_1.3-2+deb8u5.debian.tar.xz a0a946a29d6f1826a35571709988a9a1f0c99c103b9d02058f8e335bada1682a 113288 libextractor3_1.3-2+deb8u5_amd64.deb e23fd81a5088429f1dfd52906a2702ac55b165dba0cb7711d8787221d4a064f4 450814 libextractor-dbg_1.3-2+deb8u5_amd64.deb f33fbd73b20c6ec8cbd3f44bb48d272948bc2010b45641ec368ece6270799dde 26250 libextractor-dev_1.3-2+deb8u5_amd64.deb 7446f1086cbba241a0084527bb3cc9830e14bd40319f0d990d7821eaf88ecb3b 90784 extract_1.3-2+deb8u5_amd64.deb Files: 28ea4eacb4057e8f2d400de40c31f4ca 2702 libs optional libextractor_1.3-2+deb8u5.dsc 35b8913dbebafe583a2781bf71509c48 7942021 libs optional libextractor_1.3.orig.tar.gz 74f269425c2fafa243f38cab9b630639 18932 libs optional libextractor_1.3-2+deb8u5.debian.tar.xz ce49b9ec6490ccd8923baca033c122f2 113288 libs optional libextractor3_1.3-2+deb8u5_amd64.deb f97052502f36de076cb52a023b22fc29 450814 debug extra libextractor-dbg_1.3-2+deb8u5_amd64.deb d1f0ee168cba751a2b9af45f6f362cf5 26250 libdevel optional libextractor-dev_1.3-2+deb8u5_amd64.deb 4a076bf33e244a515731348b370eb56c 90784 utils optional extract_1.3-2+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl1pZ8BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR1BgEACPCEOZJc4BYuvbLiTWz0jrFqatCuIF Bq0bIcYusSPWr9YR0Vfegd+z3hLhwTUgtnKQntTQCvExZCl89zwwHt2Gic7Y5o3I oxsg1+2GgZS7ESzB1Vut1fG805HTBP4pgVa/ySLHMh+BqGQCUXK3A4QxWPZR7Ca2 WVfPUNvfrF/+F0/oQU1G74+vxOstmR41hZjXq15P2KxfgBmG33ITO9JFzK2uSfim NKP7O1UXgiR+Ypxca7bPWJC03HAmBslXH0xS+V7JCjFoWNx4qNWMYt7Vvkh7yGRT qkur6VVxIr9Lrsb9dTkYmbwFQif3DPvIH/rGyNV+FAPW+o/bOvPt8SF7jZy1+nB+ ka0oWU3PyulYIngokwIafkYo5dN1gwUmM1NVho67U2ukdeijBBrsjPN41rTjcnXY Dxt/Hbf1kFhSoGELCsJMCcTsbCP3YDAwamiGe1G3Uvh3+Arkpq8p3t+wNZ0MwUmz 5rXSIOpZnRDi5lZU1d+oP4mzdqcHezbKXQ7/WBGyPM/dsYKF14NoJg3p/CPSJxmc JNEE9EGdD50hncdHHA98FdvhLjVMppSeXVlcqyNmcq7zDMYnD1Z5NRoh4QZXoe2q uSq1k86FpywniWeGlLkPHR4Wh4Vgu/r/uJZbqPseolQav8/c6gaTs7g+IYqTNnqX hHECe+K757qqpA== =MHHM -----END PGP SIGNATURE-----