-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Dec 2015 21:55:04 +0100 Source: libraw Binary: libraw10 libraw-bin libraw-dev libraw-doc Architecture: source amd64 all Version: 0.16.0-9+deb8u2 Distribution: stable Urgency: high Maintainer: Debian Shotwell Maintainers <pkg-shotwell-maint@lists.alioth.debian.org> Changed-By: Matteo F. Vescovi <mfvescovi@gmail.com> Description: libraw-bin - raw image decoder library (tools) libraw-dev - raw image decoder library (development files) libraw-doc - raw image decoder library (documentation) libraw10 - raw image decoder library Changes: libraw (0.16.0-9+deb8u2) stable; urgency=high . * debian/patches/: patchset updated - 0002-Fix_CVE-2015-8366_CVE-2015-8367.patch added | CVE-2015-8366: Index overflow in smal_decode_segment | CVE-2015-8367: Memory objects are not intialized properly Checksums-Sha1: febb39c5cb8704ed9967f9fb986dd9ead7333b79 2336 libraw_0.16.0-9+deb8u2.dsc dcb57f30984cf7b60acf49c4c9e89dc1de0ac16d 27600 libraw_0.16.0-9+deb8u2.debian.tar.xz 04d4f92dd20de156f343e1bb1ba46a2a0137a442 218172 libraw10_0.16.0-9+deb8u2_amd64.deb 7f1e42c42acb6108463e7f8bb3404ec8fce68047 62960 libraw-bin_0.16.0-9+deb8u2_amd64.deb bf256017ddcf5424568233eb3076704720dd8f68 221982 libraw-dev_0.16.0-9+deb8u2_amd64.deb 62be3acb67a8c5669fe9bfa7edb0e502d6cb6b84 109426 libraw-doc_0.16.0-9+deb8u2_all.deb Checksums-Sha256: fda6d957a7d91261319e92ff6266fe293398486b3a60cf09638025117d8af30c 2336 libraw_0.16.0-9+deb8u2.dsc a252badc5f0fa95955640f99e2c6de9af9f8843df2bdc7f04f78a38781a22baa 27600 libraw_0.16.0-9+deb8u2.debian.tar.xz 60da93ef49881af01d83a6193d8717cd4ebbe488e01bf8ff222791ff945ab9ec 218172 libraw10_0.16.0-9+deb8u2_amd64.deb 5d6bc3832fefb9b37a25cd44a1434636dfa8ff1cd822e0a6e758e9031e465e1a 62960 libraw-bin_0.16.0-9+deb8u2_amd64.deb 1eeb801895037cf2d6d777866fbf24cd381088ab6340aa6ba7f1faf0f28c88e4 221982 libraw-dev_0.16.0-9+deb8u2_amd64.deb 9aadb63a861c08400abddb973692b52cb7672a470c12a30a6b2ad67ce879fd09 109426 libraw-doc_0.16.0-9+deb8u2_all.deb Files: 8d08eed12565261bda68ebe50b28f89e 2336 libs optional libraw_0.16.0-9+deb8u2.dsc 1212fd086b76eb34908c09ae098ca71d 27600 libs optional libraw_0.16.0-9+deb8u2.debian.tar.xz 9ca385a49c204c333ab04fb2b57ca702 218172 libs optional libraw10_0.16.0-9+deb8u2_amd64.deb f9d8af8871a47d1b466ebd2edc8de3db 62960 graphics optional libraw-bin_0.16.0-9+deb8u2_amd64.deb 149959803f5f24b9339ab21715a67589 221982 libdevel optional libraw-dev_0.16.0-9+deb8u2_amd64.deb fedb7b7c9e67206c8934b0094ee816d0 109426 doc optional libraw-doc_0.16.0-9+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- Comment: Debian powered! iQJ8BAEBCgBmBQJWgbG/XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGM0REMDlGOERBODdEMURGNTA0NkM5OUIw NjEyRjQ5NDRFQ0RDRDVBAAoJEAYS9JROzc1aUp8P+wSBRj7UopDaDN8gHt77fGW7 NWL/bKk0bChIi8oqCE5c23/ATW3EvexnQ4HE1TAJDvFrqLlREzLgUubfF58Ebo8f TUo64XG0TvyUCjRbVtH27LURuZ0GXgZCHxd91dFk5Scwxj0zlwdqQlQRtZ36bSQ+ MECR0KF9wywYdRFho/Lo9umEswzfrzwrlxSYavPVa5kF7oA0EaLBBqV0ozoun2xe Bq14fcFZAsgqCSIJZMFOCdn5UrvPu7PAEcxoGFrDy1XlefBGziRKypQe1h2cLA+n VuWAgmU6ugg/kRlve/aOgB+EvOUvuTB+rJ9cEPElDbvlj28fom/fIUJrRnupsSog s9UB2vqufObIhU6OT7tLoQ2aQ+nmYJtBsNjiN5Uxba6284LxGJAVrLhjqThT7Nhg UsuG6ZuIyBrAJOJnMxVloI/r9yJZTOZsLmT88EsVK+dBgdMdoNSIbmNV43zLuyJX Z+sSW+CDnWK1bvmOfsyJQo8EgZ9i0DTp+G86xgEVlLdB873PiJDMh6Mr9el2tBFT vGezBd9K/xTRN93VOhKgfw4vGCe6Uc8qN1dzB2yMKX76ZUXuT8ObRYxRRaQ1GX+k nfyy1FDGjjY8S1w6jLZXOZ94exS6cN0iStLNpUz6abB+7qjK1px7PktRa6dN+bAC 7lfWdlLmnioFrlqXib6L =i7Ey -----END PGP SIGNATURE-----