-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 01 Dec 2013 23:51:59 +0100 Source: openjpeg Binary: libopenjpeg-dev libopenjpeg2 libopenjpeg2-dbg openjpeg-tools Architecture: source i386 Version: 1.3+dfsg-4+squeeze2 Distribution: squeeze-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Raphael Geissert <geissert@debian.org> Description: libopenjpeg-dev - development files for libopenjpeg2, a JPEG 2000 image library libopenjpeg2 - JPEG 2000 image compression/decompression library libopenjpeg2-dbg - debug symbols for libopenjpeg2, a JPEG 2000 image library openjpeg-tools - command-line tools using the JPEG 2000 library Changes: openjpeg (1.3+dfsg-4+squeeze2) squeeze-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2013-6052: information leak. * Fix CVE-2013-6045: multiple heap buffer overflows. * Fix CVE-2013-6054: a heap buffer overflow. * Fix CVE-2013-1447: multiple crashers. Checksums-Sha1: a3bd93a944296e1afeba5e678ea5eb7f8713c05a 1389 openjpeg_1.3+dfsg-4+squeeze2.dsc d72f7fa424ea5c6075bd9613144d6d19d39a1bf6 17578 openjpeg_1.3+dfsg-4+squeeze2.diff.gz f26346d63f3bbd2f6a38bd6fdc827536a7292de2 92334 libopenjpeg-dev_1.3+dfsg-4+squeeze2_i386.deb 60e7796a55316413525cd45eb8f8d532b64d86a2 78542 libopenjpeg2_1.3+dfsg-4+squeeze2_i386.deb 463fdb982047f999ce544f2b3895257a220f0b61 296340 libopenjpeg2-dbg_1.3+dfsg-4+squeeze2_i386.deb 0b22b5c2cf26290a82d3162559c778701e12876d 195246 openjpeg-tools_1.3+dfsg-4+squeeze2_i386.deb Checksums-Sha256: dc13368725a5c9d04f7770a26d86da711286392348838e1c3f4fe0370c6f7946 1389 openjpeg_1.3+dfsg-4+squeeze2.dsc 577f801e9b7e75755d11b649279b73a822e52f226aa916929981e31dd90c4a49 17578 openjpeg_1.3+dfsg-4+squeeze2.diff.gz 3495df831e9da21a9dc6ee703b192c68bf10c4ad2309be7497bc6aeb72c55b8b 92334 libopenjpeg-dev_1.3+dfsg-4+squeeze2_i386.deb a56ed10cc323aed9198b0c3078e29c96a380a27dde21021a9b89b3234729847a 78542 libopenjpeg2_1.3+dfsg-4+squeeze2_i386.deb 03f0dab19e21f6445571eb5780034823708064604376d37527b9ea9d84a1e993 296340 libopenjpeg2-dbg_1.3+dfsg-4+squeeze2_i386.deb 77be93099fb4dd0670c6eb449eba08d33f4b93bffc5fd77f41c61690dd0cab55 195246 openjpeg-tools_1.3+dfsg-4+squeeze2_i386.deb Files: 86474edc9dcf5242eb9f20182c506aa2 1389 libs extra openjpeg_1.3+dfsg-4+squeeze2.dsc 75037a75a6a997fe390c9dcd7097ec03 17578 libs extra openjpeg_1.3+dfsg-4+squeeze2.diff.gz 78597e735c9837c9a13269bea9ee47dc 92334 libdevel extra libopenjpeg-dev_1.3+dfsg-4+squeeze2_i386.deb c4791a39541285beda6d1cea5faaead4 78542 libs extra libopenjpeg2_1.3+dfsg-4+squeeze2_i386.deb 9239fcf86c51044bbe41d00b0000b8b0 296340 libdevel extra libopenjpeg2-dbg_1.3+dfsg-4+squeeze2_i386.deb 46ec075f0a66e7876f545fe2799f4ee4 195246 graphics extra openjpeg-tools_1.3+dfsg-4+squeeze2_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iEYEARECAAYFAlKcMUMACgkQYy49rUbZzlpNLQCfffGAJypy7RseZsAzEZeVCQnC yp8Ani5tlL+HkWYqPHx0JMsrCgmXoLdX =+Y15 -----END PGP SIGNATURE-----