-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2020 16:03:02 +0200 Source: apng2gif Binary: apng2gif Architecture: source amd64 Version: 1.5-3+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Jari Aalto <jari.aalto@cante.net> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: apng2gif - tool for converting APNG images to animated GIF format Changes: apng2gif (1.5-3+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2017-6960 Integer overflow resulting in a heap-based buffer over-read in the LoadAPNG function. Checksums-Sha1: 9a336b2ccc97393673ca1ab7b27c840b50fcea41 2028 apng2gif_1.5-3+deb8u1.dsc 5b7842e181864725c8159bca8886b41c5f1279d4 11566 apng2gif_1.5.orig.tar.gz 0d4ddf5f308c1018866e04de7aee48144d367d20 7396 apng2gif_1.5-3+deb8u1.debian.tar.xz d3dc8436b65ab8aef2371259121c496cd810b93d 22426 apng2gif_1.5-3+deb8u1_amd64.deb Checksums-Sha256: dce23cbc1b427d740401bf8cb174e8150fdda9ffff847d478ec15ba52cc26376 2028 apng2gif_1.5-3+deb8u1.dsc c103be901ce58ccbc099ca7580f3757a9b70a7cd4fed34dc1e3647ec9bc85965 11566 apng2gif_1.5.orig.tar.gz c68258b409fa57173fac9bebeccbbf1a322d25829cbc6ff8366f5413a0092c76 7396 apng2gif_1.5-3+deb8u1.debian.tar.xz 9d0b6f6c829a3b64b144b8faee9f6c06c19b4af16da290fe8f5992620903f1b4 22426 apng2gif_1.5-3+deb8u1_amd64.deb Files: 395ee1072fbcfdff4675ea53d9e9c089 2028 graphics optional apng2gif_1.5-3+deb8u1.dsc a6dd899810743791eed2d44be6e6f038 11566 graphics optional apng2gif_1.5.orig.tar.gz 7a2e37347a5a7c7206f4f06892c4ef26 7396 graphics optional apng2gif_1.5-3+deb8u1.debian.tar.xz 95ea298ea74eccbc41292a4efbdcf2b3 22426 graphics optional apng2gif_1.5-3+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl6DVz5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRz8lD/0R+UEu2h0gAfLREZRRr9hcj5Oj+OF6 jxGb4Hvcglnwag902ITq6x1xSKOiYW2T55Vqyq4qd5pCL9VmO9nxR/GFuf7dAXJ4 Tkb0cbyBC7/Q3/6PdViXy8aOTCMRsJi7+rzfBQwsT7VnODhWQnRRLU/6w4C2VPx5 FUShQFzOdIlvNkVSlxBOd8aR7QFpnua8q27niXqtq3sR5XPQEgzgqhIbG1iLaYb0 lxZeZR1vuX5Kq2YkVG7RiFaLhn7XY2MPfrZIZAW+HumcIVstJ1lAlv4vWtacYvV+ 7bHkpC2f1Hac6pEy9gNehgXyixhjsxuxEeMeH+yjlcZRoUSawEZLBWG/M2Fu4qyg +lmJ44Lc3p2U+H0OEkTCCg/fcal8BcZWL26E6X17Hz3SIkzEpaI5vxdM3AozbnDx Q0nkFmYKs9aE3wPRFmaE/Tup6kDHqHRiEIgF1OaQEYG2xSv1qV5oQgRqMItTRkin REzqRzkE8A54zqCBbQFZuXv1/yU5D+KyRIb4my05xUJMLPFTOF0y2bJ21GwH/ZD9 CclLDZBsw1OG3RYqMSyBF0zVdNIiZUfNaSCGNq88gCvLMBaF291SMwKeFiTfvncT 39H/Fiv5e6U3HNWFDa8VUC4Uh0K4b6QrCf7ytlo5YZIrHXE6UBCJE8m7JRWgtGX+ II2EG1IzFzoPvw== =nxym -----END PGP SIGNATURE-----
