-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 05 Mar 2020 09:38:19 -0800 Source: pdfresurrect Binary: pdfresurrect Architecture: source amd64 Version: 0.12-5+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Francois Marier <francois@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: pdfresurrect - tool for extracting/scrubbing versioning data from PDF documents Closes: 952948 Changes: pdfresurrect (0.12-5+deb8u1) jessie-security; urgency=high . * CVE-2020-9549: Prevent a out-of-bounds write vulnerability via a specially-crafted PDF document. (Closes: #952948) Checksums-Sha1: e5f740d8ffb58da8f3c4b7ce1906693bc06d1010 1940 pdfresurrect_0.12-5+deb8u1.dsc 72d960875c8ff65609f814062bfdde9d9eba3802 65243 pdfresurrect_0.12.orig.tar.gz 22f45d19488422b61372f58f984ba0917b7d851a 3584 pdfresurrect_0.12-5+deb8u1.debian.tar.xz d942664e6b73eaa53d1b8576048bcd89130c43e8 18786 pdfresurrect_0.12-5+deb8u1_amd64.deb Checksums-Sha256: 32795b9d8db5ff8ba906268a735d87fa93286dc9582b8d8ffd9dd5dca64440ce 1940 pdfresurrect_0.12-5+deb8u1.dsc f2967d1fbabc24c6a50c5981c738c7daab7cd761261e64421322bd6010638d47 65243 pdfresurrect_0.12.orig.tar.gz df75f9d052a0b766dbcdf6a02d9a7a82b5bb136e1f46d6ec08e4c976fb98d9bd 3584 pdfresurrect_0.12-5+deb8u1.debian.tar.xz 64596d1d57693695c14877934127de76d245a8e7c049753cc0798a864d43d26f 18786 pdfresurrect_0.12-5+deb8u1_amd64.deb Files: 3a6f4888378c47bac5cbed5538b8b245 1940 text extra pdfresurrect_0.12-5+deb8u1.dsc 3579be0aa3ba9872b4e84b5a282176b6 65243 text extra pdfresurrect_0.12.orig.tar.gz 55052669a40dba49ce561b45d244f75e 3584 text extra pdfresurrect_0.12-5+deb8u1.debian.tar.xz 4ab8507260ae4e94e15a28de4777b955 18786 text extra pdfresurrect_0.12-5+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAl5hOjAACgkQHpU+J9Qx Hli7vg//YKChVbIwyaFOmJLeVyb9cGXaXd+fmgxDQ7IquBWdR7F8jhqsjuKfFg+a opP0EKDjtSHOH+dexVbtp10zHjB6OhdknPtV8g7Ib7xk6ma1rILNwoaZ4CaGTJLx o9hpeplbNH/gP9XwpQoiQPPeexJixbKQ58/cWzwK3xFgKsNb6qiGSD7S/ZeI67Di T0cFL5HauPlfUGr687tz/k27V7iKqig1IjsytPHWkuPKWe3mYfRRATV3jkaCSNCN YcjRcZL0PMZ8WQzgGCk5LKlS0Kxd+fNBJRZh5qns6XMWXSSi3/jPsI8jMaygWnrC si07KtY0d2B8Awfclrbab5z2dR9askL5BFMwUaK2ybJptgRHcu82oEW2LY7KhQoz ylyMU3mBPROXnIGiYljwvbVAzm4b7jmGPnRSpuSB90PdaDvzdxiJTgPcLZadLzWb yJeF1Ee4Krvy9QAmkOsRsFTqzn/C/OcKu+4FaD0SNlFXuUEk+DyP9Ti2hlfKic5o ffffNPFR6MGRYsl77C5TkJ67a0Mxo8eKQdGxgbs1vqBe/v5SQdeIsS5LXBpoufb6 3Bo1c+uKiEaNLMVoK1P87PjpeLIN+Rvc+s0CBtBoIDoaznMSWn1ZtpQqg4ZLJVUv nbQnsveyQO45U94UIge3tk85yytBl0Ttre4JSSv8C4T/XBDhBP0= =gzDM -----END PGP SIGNATURE-----