-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 09 Sep 2019 12:42:52 +0900 Source: libsixel Architecture: source Version: 1.8.2-1+deb10u1 Distribution: buster Urgency: high Maintainer: NOKUBI Takatsugu <knok@daionet.gr.jp> Changed-By: NOKUBI Takatsugu <knok@daionet.gr.jp> Closes: 931311 Changes: libsixel (1.8.2-1+deb10u1) buster; urgency=high . * d/patches/0001-Add-malloc-size-check.patch: fix CVE-2018-19756 * d/patches/0002-assign-default-error-message.patch: fix CVE-2018-19757 * d/patches/0003-add-limitation-to-width-and-height.patch: fix CVE-2018-19759 * d/patches/0004-position-error-check.patch: fix CVE-2018-19761 * d/patches/0005-size-check.patch: fix CVE-2018-19762 * d/patches/0006-prevent-to-access-heap-overflow.patch: fix CVE-2018-19763 * d/patches/0007-check-error-for-jpeg_read_scanlines.patch: fix CVE-2019-3573 * d/patches/0008-check-number-of-repeat_count.patch: fix CVE-2019-3574 * security fix, closes: #931311 Checksums-Sha1: 590bda468f9011d05cfc5c3ec443bef57fa79b76 1980 libsixel_1.8.2-1+deb10u1.dsc fb21c2a15f5ecceaeeead4dd1f7bf64a3afc7693 6296 libsixel_1.8.2-1+deb10u1.debian.tar.xz 2489b69f4a7d1111767b197afe4cd8cbf7820ccb 7168 libsixel_1.8.2-1+deb10u1_amd64.buildinfo Checksums-Sha256: 7041b13dcb4e4ba1af05ca348bc924c4ea1f5445f8775ae32e62de3540b3f898 1980 libsixel_1.8.2-1+deb10u1.dsc a13f82d1961c0b60f5c12080d9a15e0f26a2834fb33fd7283da80310ff876e93 6296 libsixel_1.8.2-1+deb10u1.debian.tar.xz f31ec71a13f6e1429d102658c03d0b34217cdabedad895355281757a26cc02b6 7168 libsixel_1.8.2-1+deb10u1_amd64.buildinfo Files: 10bcd674acba17ea143995d6dfec700b 1980 libs optional libsixel_1.8.2-1+deb10u1.dsc 7123843de4a6f0e615fa1efd4da16f02 6296 libs optional libsixel_1.8.2-1+deb10u1.debian.tar.xz 2a5be813ffe9f733ac1337a8de74e393 7168 libs optional libsixel_1.8.2-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEmUUrTdKL7qyKtckxsGZi7JwMFAQFAl2mancTHGtub2tAZGFp b25ldC5nci5qcAAKCRCwZmLsnAwUBKMoEACUIuuCjARUHZWr4l7qoaUlEYHnqFbM fESzmWrT2B2H31+RX+pkc7aLRuan4hLN5FbND2PIEDBBNhzNPtw3TuLvOk+93O4t ez7BZSr3s9hZer52LcBsOJaBqAt98a8kEQNG9H8PAvHXPXT6Ouzam5UwHil/1qhj QTrGuAUjs/07TIAUycReSM9D80cm/T7O9JRc+dkVfe+480QSmN+pYh/fOBl7wFXi PRGwxx63xoiqaK+kPFNg2CAX6Hk4+NxWrbDqedZnajAvNEc1FUJbQ6UA/yZMDLXI aQkFL6Vl+H5z+LW5bUksoP5JwueGqcIGXGd0B32KWJPkTuAsxY0fuwTEtdwtiVfh z+TJC8P/I6ACB/i/dxv1jHjFbLfOnVRks0ySzF8zrQN7IX8l0nAqxdrokPNJ+gAf B1NeHeh4To4HSR6vq51QYu1uy5b4TquL9ZLVepAaj7IUTYpgn82Wf3uAvrjzqPd6 Uw9BYTKfR3VGyLxcWNj7cjQm+X6Oun7jE3A0ANalUt/RdXHmfcGDK+E+Yg+KB8Us yKZNc1FJU/Xm5OVaO7IqaOTm79zKBpdWFuC1yxINDBXm1RA1CvHTy4YSe9QjOQkk MH129e7z9zFtwdtUIsYZvpiByYVOC4QnQFqIuYdcDQ2Zb0D6dIpcA5Mh5XvE7GMR VnCJmmsTcrp7Sw== =k52w -----END PGP SIGNATURE-----