-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 12 Oct 2008 21:40:59 +0200 Source: jasper Binary: libjasper1 libjasper-dev libjasper-runtime Architecture: source amd64 Version: 1.900.1-5.1 Distribution: unstable Urgency: low Maintainer: Roland Stigge <stigge@antcom.de> Changed-By: Pierre Habouzit <madcoder@debian.org> Description: libjasper-dev - Development files for the JasPer JPEG-2000 library libjasper-runtime - Programs for manipulating JPEG-2000 files libjasper1 - The JasPer JPEG-2000 runtime library Closes: 501021 Changes: jasper (1.900.1-5.1) unstable; urgency=low . * Non-maintainer upload. * add patches/02_security.dpatch to fix various CVEs (Closes: #501021): + CVE-2008-3522[0]: Buffer overflow. + CVE-2008-3521[1]: unsecure temporary files handling. + CVE-2008-3520[2]: Multiple integer overflows. Checksums-Sha1: 3e685ca6968d53af74b69d5756fa1bbc18d264ef 1075 jasper_1.900.1-5.1.dsc 21ae9cfe449f702a5b728ae37729c2b3be19e5a4 38130 jasper_1.900.1-5.1.diff.gz addca5ace15eae26fbda8d84df618f355ab64314 154672 libjasper1_1.900.1-5.1_amd64.deb 7b4ff1a1b0dcf9515f0304ab947db6b25319c164 561204 libjasper-dev_1.900.1-5.1_amd64.deb a44990054971b7a3ba0f76aacfcc3a0c149c8ce5 25764 libjasper-runtime_1.900.1-5.1_amd64.deb Checksums-Sha256: 0f3b1d9e87d170b99f8065e781737fb08fb07bc3bd3c33d5a74767417de7f9fe 1075 jasper_1.900.1-5.1.dsc 7711d45a3fbf7c3cc33ccfe412b20ce96879402b88e924bec6af58d9d7963663 38130 jasper_1.900.1-5.1.diff.gz 8519043830ae889ec17b8ff3d1f9513a29b3deaff439ba096686a1d2fcb7aa8e 154672 libjasper1_1.900.1-5.1_amd64.deb f534ffb780523db1e90e0be0a8cdcd36856d65b4c5159ea04f8aa52225d3b6af 561204 libjasper-dev_1.900.1-5.1_amd64.deb dd383db420997babd1975105187ec82f706b198cf8a5730fb7b11894876ba219 25764 libjasper-runtime_1.900.1-5.1_amd64.deb Files: c25f6aa88120c2d5d7edf270ef2f824d 1075 graphics optional jasper_1.900.1-5.1.dsc 59db283db89575286272c42121dc1794 38130 graphics optional jasper_1.900.1-5.1.diff.gz 7db5018df734b17eb84d253ad592f7aa 154672 libs optional libjasper1_1.900.1-5.1_amd64.deb bbfe223db0d46d89d52992911b719e7b 561204 libdevel optional libjasper-dev_1.900.1-5.1_amd64.deb cbc7b67f4e62ff7c0c5357effdee9d53 25764 graphics optional libjasper-runtime_1.900.1-5.1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkjyVz4ACgkQvGr7W6HudhzQzQCfQBeiHg6dqaoHWZOx8n7dHn++ UZ8AmwS9Tht0oazGt1A8Q9TI3ATKLDTe =HmDb -----END PGP SIGNATURE----- Accepted: jasper_1.900.1-5.1.diff.gz to pool/main/j/jasper/jasper_1.900.1-5.1.diff.gz jasper_1.900.1-5.1.dsc to pool/main/j/jasper/jasper_1.900.1-5.1.dsc libjasper-dev_1.900.1-5.1_amd64.deb to pool/main/j/jasper/libjasper-dev_1.900.1-5.1_amd64.deb libjasper-runtime_1.900.1-5.1_amd64.deb to pool/main/j/jasper/libjasper-runtime_1.900.1-5.1_amd64.deb libjasper1_1.900.1-5.1_amd64.deb to pool/main/j/jasper/libjasper1_1.900.1-5.1_amd64.deb