-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 Apr 2016 13:39:26 +0100 Source: imlib2 Binary: libimlib2 libimlib2-dev Architecture: source amd64 Version: 1.4.8-1 Distribution: unstable Urgency: high Maintainer: Alessandro Ghedini <ghedo@debian.org> Changed-By: Alessandro Ghedini <ghedo@debian.org> Description: libimlib2 - image loading, rendering, saving library libimlib2-dev - image loading, rendering, saving library (development files) Closes: 639414 785369 819818 821732 Changes: imlib2 (1.4.8-1) unstable; urgency=high . * New upstream release * Fix divide-by-zero on 2x1 ellipse as per CVE-2011-5326 (Closes: #639414) * Fix off-by-one OOB read as per CVE-2016-3993 (Closes: #819818) * Fix out-of-bounds read in the GIF loader as per CVE-2016-3994 (Closes: #785369) * Fix integer overflow as per CVE-2016-4024 (Closes: #821732) * Refresh patches * Update symbols file * Update Vcs links * Bump Standards-Version to 3.9.8 (no changes needed) * Fix spelling-error-in-description Checksums-Sha1: 5a93832dbb9e35b20f42602500f71379e32cc7e5 2006 imlib2_1.4.8-1.dsc 982ffe64592a6b075f4ba5ffe9dd92266c505d9c 1028562 imlib2_1.4.8.orig.tar.gz a66a763f0ba7ac3cca51adabb52a9c5ce9af54d5 11628 imlib2_1.4.8-1.debian.tar.xz 8d2fc19ec788163673356063a700eee727b05318 421696 libimlib2-dbgsym_1.4.8-1_amd64.deb 5a5fa3ce51a9ec60cb998e06482181e8f8903f64 196926 libimlib2-dev_1.4.8-1_amd64.deb 421cca802a98e9d574cc84b54489d81bdcedaa25 204620 libimlib2_1.4.8-1_amd64.deb Checksums-Sha256: 027d47ccd8b40f830274880abe78cd639d778dbe7e9b9503fa546a1c8f1c419c 2006 imlib2_1.4.8-1.dsc b5b97be5446d9c5635c288bfe970896148d8bc027ab01f854112cae03b65a3a5 1028562 imlib2_1.4.8.orig.tar.gz 211fed683ebc77d1f91c229e27bbce1ef0d88aea17a6584a324ad82ec1d013df 11628 imlib2_1.4.8-1.debian.tar.xz 9f9d0f4a3507eec042b8ddaae47a0cfe92398d45cebfdca641d6de62a6372a5b 421696 libimlib2-dbgsym_1.4.8-1_amd64.deb 13e996c8e4ede7693cbb6eea696c0e305ae519af1720fcb1851a7ec5dea19bd5 196926 libimlib2-dev_1.4.8-1_amd64.deb a9cee479608e93ea0305c9b8ed3509568a5c909b0cc4b9cfbde8403c9f0a4b7b 204620 libimlib2_1.4.8-1_amd64.deb Files: 8c6322245baee7ccfe52cc694449bc2a 2006 libs optional imlib2_1.4.8-1.dsc 2e9d5054022945ed14935d5f61fc2145 1028562 libs optional imlib2_1.4.8.orig.tar.gz cd78bae35929765c7866a4c40e851580 11628 libs optional imlib2_1.4.8-1.debian.tar.xz b433b107a6f9a679ba7bd6a8b98f723f 421696 debug extra libimlib2-dbgsym_1.4.8-1_amd64.deb a44ea04aabd60cc48e99f69341a3ab8c 196926 libdevel optional libimlib2-dev_1.4.8-1_amd64.deb da86fe35fb1d6d910211499838fd5fbb 204620 libs optional libimlib2_1.4.8-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJXG23NAAoJEK+lG9bN5XPLb8UP/RbVATo6bEVOAJKJEGa5PvHg ZLp8bh75K1w6CnZFkgsLYdumLQ7lI4V5yLrqdqi5HTbMtX2gsyEZpAWFXfEqGpGY v+pnMelWPYGqPjvHs2r2451oeeLf6Lzqnoj8+fGR8LhQ9NI8Zp0PPBl/4xYsZnFu IghCHk+iUNU//EkTcPa8plTuc4OCdv+jD88w2BE8o6UpWZqglAfLm+Z0aWdTszvg bxlfJoo2sMQ1X68d0ACQzmr9DDvKf1c2wDjQrZNyxLYRMrsN+sJEgh+g0iY1NqOl ZV1GP6ZbBazOYkkfR9Dw/+b+N/aPMKdGU+t0yChH6cJJcXPcGgrWR+4b6Ia1yM5S cOoAcH9KR4SUU+Ih3uRjk4AVv37qHr/A2KB4CxIKWWXdMflZ4zjZONkGZP0ZRKzD FgNUwWZVYQ3M4OQ8LS3P3023e2b98IyrYDTIpJBSHNHOmKpOSMOnHyXH391zOzx9 vOiBVqII8DvcfhfBCqX7S5jlQ2niWBjRrh946c9ZdMZJJQUEpaNyBsN42t1fQAzq xVVzah8LkbR37AJpiZdfvy2wY5qz4FQs29Ypbeu1SFOrUi0L+Ig2gvCEiVFeVZls W3EGG7GhCHmOmhaCoPY3fDiGG6ftmU+S1DINMuuAJx2ohCJoWktXwObR066xOolP 7kCgUphtazOcojYlGSh/ =eoRm -----END PGP SIGNATURE-----