-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 18 Feb 2013 18:55:32 +0000 Source: openjpeg Binary: libopenjpeg-dev libopenjpeg2 libopenjpeg2-dbg openjpeg-tools Architecture: source amd64 Version: 1.3+dfsg-4+squeeze1 Distribution: stable-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: libopenjpeg-dev - development files for libopenjpeg2, a JPEG 2000 image library libopenjpeg2 - JPEG 2000 image compression/decompression library libopenjpeg2-dbg - debug symbols for libopenjpeg2, a JPEG 2000 image library openjpeg-tools - command-line tools using the JPEG 2000 library Closes: 672455 685970 Changes: openjpeg (1.3+dfsg-4+squeeze1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix cve-2012-3535: buffer overflow in JPEG2000 decoding (closes: #685970). * Fix cve-2012-3358: another buffer overflow in JPEG2000 image file handling. Fix cve-2009-5030: avoid memory overrun (Closes: #672455). Checksums-Sha1: 732749852ee1b24b438f2854ceec736c34cfd5cd 2721 openjpeg_1.3+dfsg-4+squeeze1.dsc bac94ef1e288aaf122f1c45605236bac6b47dabd 895482 openjpeg_1.3+dfsg.orig.tar.gz af209d8cfef4cab04c62937cf52c5edaff675aa5 13429 openjpeg_1.3+dfsg-4+squeeze1.diff.gz 8960d632bba1407d580c359c02925322fa26e415 95034 libopenjpeg-dev_1.3+dfsg-4+squeeze1_amd64.deb 775e3e8c22315d9a1721e17754ff36ca49b7b62e 82040 libopenjpeg2_1.3+dfsg-4+squeeze1_amd64.deb a5b3f6c3d681c97e736ed28f104a5904598b7d01 315416 libopenjpeg2-dbg_1.3+dfsg-4+squeeze1_amd64.deb d8b24ad9b0e88e3b64e62a955856e753799fe122 210010 openjpeg-tools_1.3+dfsg-4+squeeze1_amd64.deb Checksums-Sha256: 98d749a3c8607d00b8a63e79a00b30968d0c67b14e0c83ca833e353c8f9448ca 2721 openjpeg_1.3+dfsg-4+squeeze1.dsc 5ba9a6653931907c5b7cc67443470f1b23a5be846ab11ccaf8ca7e2ffa6387af 895482 openjpeg_1.3+dfsg.orig.tar.gz 15a3c457f5770575cf6a2b23353cb8b852bc3c992155bb261559f56d8cbd904b 13429 openjpeg_1.3+dfsg-4+squeeze1.diff.gz 92924f30eb78ab612719b2ddec4a54a30341ac1c6b0006c008a6b7447b466182 95034 libopenjpeg-dev_1.3+dfsg-4+squeeze1_amd64.deb dfc7a895749150eedcea53eeca1fe90a817e913fe70087d830434c2b375ae998 82040 libopenjpeg2_1.3+dfsg-4+squeeze1_amd64.deb ea1f1fad67e57f6c543edff429952d02da610f7b7aeeec04702dec9735d774e7 315416 libopenjpeg2-dbg_1.3+dfsg-4+squeeze1_amd64.deb 51fa15cf42d6fc9580ed0249131fcf209cdd88661dbdfdc25723a77331f49cc2 210010 openjpeg-tools_1.3+dfsg-4+squeeze1_amd64.deb Files: e0e28bafe79e4ceb345aa1382462a527 2721 libs extra openjpeg_1.3+dfsg-4+squeeze1.dsc 5fd807abf8a71adb021181d2790eda86 895482 libs extra openjpeg_1.3+dfsg.orig.tar.gz d0960b4d7a4911c4778c9e9a2d8d31d5 13429 libs extra openjpeg_1.3+dfsg-4+squeeze1.diff.gz 84a7a3719f6d3e8847778d6f3eca83c5 95034 libdevel extra libopenjpeg-dev_1.3+dfsg-4+squeeze1_amd64.deb 538b78e4b7e38c4064e7c25f2a5b0c78 82040 libs extra libopenjpeg2_1.3+dfsg-4+squeeze1_amd64.deb a08d5395af6ccd86e0301bf1e513a260 315416 libdevel extra libopenjpeg2-dbg_1.3+dfsg-4+squeeze1_amd64.deb c85abfdfe50560033abb34ad4e8aea9c 210010 graphics extra openjpeg-tools_1.3+dfsg-4+squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQQcBAEBAgAGBQJRInlIAAoJELjWss0C1vRz+Jgf/j7zqlWpVGp7UNusQdozofjf 6sHJZPKKr0FL0rIgXDwt/P83KJ6bwN+JKRCzODabGSeO4yIBzBFhCh86tAqwP+vO 3p5ij4WnXLNxVpQEuzCZH+iD0w8celgfzN/PN7/YHZRQiLoG4Ee1CRqyyIm27rOb Mq0o2XWP0UsajoTnUuf6ThHNJiCE5PytrKe2QI6RhEHPIYzer0s2Z9Imc7x76GQA E5C/EaBLLSrl7cm9La13DB1d9yljbZfDiIu8SvwhTu5JNdN/e2aAX5HPVC3BThr4 qQ7O1OLyhjz5yhLDJTGr2kz971sm1bj+JIqSB+Vze7r8CxRyTjHIPkFvC9KwoIT3 eUlXUWXBKa2bMy/jmv/wLTDucWXMy34gSgM62RXlnLdODroaiPDmKYHDGx0FovF0 L1ldGzyvxKHF1G3kkAil1p5qHgAyQW43dJ6wgBDuJcX75J3tUJbduZMSh+ZeJLzd 1M3dclnf8BErZFci+InwL0e9G5wiE+sn2Nkwx33Zl2+hae4s16GhiYKle41eLWXI 5oTZWwDMOWx43hRufEQsfg842SrxVVdwceBLKSDxjYUUr17X9hdk/x088c2jsQAt nJAWuxCdW769UQjcDMgRhlqHEH3PwUF0XnCsk5S5pHzulH3D+2S4HGCg64Kkzcv8 FoNkVEskXzHJP3zVKzhzwBXkUH40+Ahf6CuvC0xUhFl3A6SuqgxCbhVXubtC1Pc6 WKe9VToHKzj7Wzxoy38SKpASB5nCEr54F0H8/lU2uXLdzdjRq7CHyAGgiqVPx8ko YdWXYD0HqPuiCxeuAYJUpxRfxJ//+vRfvBo7e9r++QqZNDjOQnHs1dP0TLASEWCy o74/vGlrcx1cmUku1NbOnYvjrwOhrvnqluvvkfJANxjzc11zSzljqLJ4surgKmOo /9azDhqShmZXIr8Bxd/FgBCPvVEI3GS4t9yRSbQPSlM833GBUdRv6q5bgIkYoStm 76ART5dEvndYZpYXJZNRhy1+7li1DlJZdrrAc0JjvDU5VN54ePbmx+xA4+gEUDyG pNjpvx/fiaB3NCeDryxdW1bVMdgzLU+BNyIHfIFmWEjnXKC/anN++i6BnjZMW7KF P/mfVZ8WJ0t/FvB7jItsjg2Iz3FBehnZC8F6vjz/pZyE/++Gh9CSTA6DaX2em035 +TJd4kWBbWHgeiUaCZf7X4wArJ09z5lMbrok1Man4vsFCQ5JhvV4YNMuLG63cchW BbAalahTSrxeVIEXJSNUZKuh5Ldbx9cAd5qlkUxryPtQro+HuSPdDcgbuZ9cuhcW bKKDaKd0FQ4N2PHPgCSMgC8epV4OpBD3cJSaBeT2qKfcCS3kyC9zkAID1murwWE= =nT6y -----END PGP SIGNATURE-----