-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 16 Jan 2015 20:34:25 +0100 Source: ia32-libs-gtk Binary: ia32-libs-gtk Architecture: source amd64 Version: 20150116 Distribution: squeeze-lts Urgency: low Maintainer: Debian ia32-libs Team <pkg-ia32-libs-maintainers@lists.alioth.debian.org> Changed-By: Thijs Kinkhorst <thijs@debian.org> Description: ia32-libs-gtk - GTK+ ia32 shared libraries Changes: ia32-libs-gtk (20150116) squeeze-lts; urgency=low . * Packages updated . [ jasper (1.900.1-7+squeeze3) squeeze-lts; urgency=high ] . * Non-maintainer upload by the Squeeze LTS Team. * Add 05-CVE-2014-8137.patch patch. CVE-2014-8137: double-free in in jas_iccattrval_destroy(). (#773463) * Add 06-CVE-2014-8138.patch patch. CVE-2014-8138: heap overflow in jp2_decode(). (#773463) . [ jasper (1.900.1-7+squeeze2) squeeze-lts; urgency=high ] . * Non-maintainer upload by the Squeeze LTS Team. * Add patch for CVE-2014-9029: Fix heap overflows in libjasper. . [ qt4-x11 (4:4.6.3-4+squeeze2) squeeze-lts; urgency=high ] . * Non-maintainer upload by the Squeeze LTS Team. * CVE-2011-3193: Check for buffer overflow in Lookup_MarkMarkPos That may cause crash in this function with certain fonts. * CVE-2011-3194: fix tiff reader to handle TIFFTAG_SAMPLESPERPIXEL for grayscale images The reader uses QImage::Format_Indexed8, but since the samples per pixel value this should be (non-existent) QImage::Format_Indexed16, causing memory corruption. The fix falls back to the "normal" way of reading tiff images. * debian/rules: do not do "make distclean" as qmake-qt4 disappears before all steps are done Checksums-Sha1: 2b50bb56b80d18aee6bf9bcf6ada407b51a84a76 1556 ia32-libs-gtk_20150116.dsc bae0bb42a34b6d64416cf192caa9e3a94444f582 246868665 ia32-libs-gtk_20150116.tar.gz b1303cf691e9f2d8536e12a2ddeaee872564eb0a 14472822 ia32-libs-gtk_20150116_amd64.deb Checksums-Sha256: 63169999880f08c654022518c1f4df7820d5a58b09389f6712262ebf4a08ce82 1556 ia32-libs-gtk_20150116.dsc bb72beafff6a4bca942b86cf8774fd2b98c969b7ead6c7ec2d5979d34e5a8141 246868665 ia32-libs-gtk_20150116.tar.gz 0ee58910b55819f5d81cbdaf5e40bf9bd597ba72c649324bde18898ff7d4b6df 14472822 ia32-libs-gtk_20150116_amd64.deb Files: 7e6b36b0a2095f4d053b86540b437129 1556 libs optional ia32-libs-gtk_20150116.dsc e867e342018f9470d9fd16d12e06823f 246868665 libs optional ia32-libs-gtk_20150116.tar.gz fa39efffadbea08a0221eaf3e850c9a8 14472822 libs optional ia32-libs-gtk_20150116_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUuXk4AAoJEFb2GnlAHawE6AoH/0ZhHR33PPuv5y3dD5tqaox/ 6JoMnPDsrbOuKdBWCyAr3123gkODVvt5kpphPYuSYY/EBvgrH7HoCnaioYZnatu+ asmePfnagGVLDKzv8oarNt0bX/lWLduP2u/FjP0psBG+wRx8l+GyNfoTdpf0fOH4 oii9aNM2WBWa4+CsSZo7oJSJKZTjNb6ZUsOx8LOKTjGuFAz/ynMZTTPl2vFiiv7X iCE4DLAMLvc9dUS7byTyzfAhNv9VCJiHOzdvFerwUxVW3TxR67khjTqDZrFm+5au Umx44oTOi6DqR5u2QdJEK+bck11DAIWeNwst5xbnCakyLoAhJyyVrsHM0+zsQ2o= =+g2B -----END PGP SIGNATURE-----