-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 24 May 2020 16:03:02 +0200 Source: feh Binary: feh Architecture: source amd64 Version: 2.12-1+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: feh - imlib2 based image viewer Changes: feh (2.12-1+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2017-7875 It was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. Checksums-Sha1: 1e33e7a6899151d32181f1da6b60ca30db6c63cc 2248 feh_2.12-1+deb8u1.dsc 30eb2b778858b1f4ce97e44c8225758185b0c588 2090538 feh_2.12.orig.tar.bz2 82c9b856e68c5496abbad37f60de9073f486f1a8 7896 feh_2.12-1+deb8u1.debian.tar.bz2 82a335af7786eaea5e7f1dcb917e42077bf4b2db 191384 feh_2.12-1+deb8u1_amd64.deb Checksums-Sha256: d7f2cd57480d2728199bb236dba7d6ec00f401d6ffa669a9459512026ef8268a 2248 feh_2.12-1+deb8u1.dsc 60e07a0f545f6fb7af7b6c0d2ce1ba6bacfa65380e83cbbc2c54e8aa6b8b7032 2090538 feh_2.12.orig.tar.bz2 09fba802b611b555fa3032c364f10babcc1e4b11231a60f8222a78093778da8c 7896 feh_2.12-1+deb8u1.debian.tar.bz2 03ca4bab73dcca85f6c8394af975ad679d1527b5fc06e057d08d86a3b91946b0 191384 feh_2.12-1+deb8u1_amd64.deb Files: 499b2e763386396ad23ace51358428c4 2248 graphics optional feh_2.12-1+deb8u1.dsc da59074c2e7b68fb08f555e366f827a9 2090538 graphics optional feh_2.12.orig.tar.bz2 7029cfdb701be81e55017546111f1423 7896 graphics optional feh_2.12-1+deb8u1.debian.tar.bz2 75d3527c31cafccc69a20a0f31321525 191384 graphics optional feh_2.12-1+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl7Ki75fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR5ZLEACUpv9jh3WdRViNPNxgugiV5XHmkDfq PUL0JPxe7BLwFOa6K59C07batVIskXxmDSJS1XrXUiXD61AzS0hA2n01UdogrN02 vi0J2fg2S3YHtdF6zi21sLFBfN6zV3QIK+hIATnEHpRyp1jcZGuhqaNY02qXHbuF zWVskpO4nC16Q8U97CKOMCEkJUoU3NmXt8hSIbSSWWd5ZLgS0WxutXlpmOXQSO8c VyT95DFp7TJ3em9kbTbKEYqBH2nNIt1gVkv7jBei09zXxKuPxbYApNsnz1iM8PFD ESWaKSLoltzi6fZpChaWoy88cxVUyhBwUlAf2HrX4vaicV7eVWOxKtJEuC6Sl4em 8oU71O0lRO6uexruLQUumcRuRGC1G2mPzY0i/STi7iF42Tth3xPdDQ7xDdyvbJ4Z +7aYoZVg7NU1HbWqqyt9SV8XA+7jiFRAYz27p/pzP8B/IESsvke87swBbfNDhl6G X4C7evCY2xyj0RM+0q+sTpgw7YWfgEdWM7SLpt7NvywjzIF41M5eZTE/FUcafaCo +QYaE2xQxdHAgZYFBwdH7gPXDMSlvk8U27d/lMvuptsz3BZqHOLeQF7GQWSUIPMG iLUbvrsOn1D9TM2Tl2b8Mi30qS7evcp1+VhJaXCg/u74zBI+lz1wVrXq1UGz0g4L oP1ESJL43qmezg== =yP1y -----END PGP SIGNATURE-----