-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 20 May 2016 10:58:03 +0200 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 libgd-dbg libgd2-xpm-dev libgd2-noxpm-dev Architecture: source amd64 Version: 2.1.0-5+deb8u2 Distribution: jessie-security Urgency: high Maintainer: GD team <pkg-gd-devel@lists.alioth.debian.org> Changed-By: Ondřej Surý <ondrej@debian.org> Description: libgd-dbg - Debug symbols for GD Graphics Library libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd2-noxpm-dev - GD Graphics Library (transitional package) libgd2-xpm-dev - GD Graphics Library (transitional package) libgd3 - GD Graphics Library Closes: 824627 Changes: libgd2 (2.1.0-5+deb8u2) jessie-security; urgency=high . * [CVE-2015-8874]: Stack consumption vulnerability in GD allows remote attackers to cause a denial of service via a crafted imagefilltoborder call (Closes: #824627) Checksums-Sha1: ad32ac0e90643d11a81173a90d8b2884ef2cb265 2467 libgd2_2.1.0-5+deb8u2.dsc 66c56fc07246b66ba649c83e996fd2085ea2f9e2 2004304 libgd2_2.1.0.orig.tar.xz f9c79b74b4d8f6c4a66426f54b934469cfd13302 37612 libgd2_2.1.0-5+deb8u2.debian.tar.xz d14739fa063d1565cf4a1d1e85bdc077a8522c03 41818 libgd-tools_2.1.0-5+deb8u2_amd64.deb ba775010d97dbb079a7d468dc943e2b0d0924201 285822 libgd-dev_2.1.0-5+deb8u2_amd64.deb 9d2aee7376988be822b5881eaab018f831c0c8fe 147108 libgd3_2.1.0-5+deb8u2_amd64.deb 0cb56a363a0f91832bc08e55c85e92667c8c12ac 315044 libgd-dbg_2.1.0-5+deb8u2_amd64.deb 7b353152e86a3f1930d75af8a8aab59f1e71eb38 1226 libgd2-xpm-dev_2.1.0-5+deb8u2_amd64.deb 56e3d88360f184fee9f2409a42437a39d4333104 1234 libgd2-noxpm-dev_2.1.0-5+deb8u2_amd64.deb Checksums-Sha256: a755508e3802b554c6be318d8fe40847cbc04a1eeb44a28344145ff352a28e0d 2467 libgd2_2.1.0-5+deb8u2.dsc fa6665dfe3d898019671293c84d77067a3d2ede50884dbcb6df899d508370e5a 2004304 libgd2_2.1.0.orig.tar.xz fc6c9939b11e4441ceea9f0f7c6741079771b2026da2c2da96d097b8c756d65a 37612 libgd2_2.1.0-5+deb8u2.debian.tar.xz 97279f089a5536844bbeb004d3acd96d6d0b9bdda50f1c802873f329ebabcdbf 41818 libgd-tools_2.1.0-5+deb8u2_amd64.deb c6486c8ddbc2f7fae11e98e4ff299b5dce06eb63a479c119043c911efdced337 285822 libgd-dev_2.1.0-5+deb8u2_amd64.deb f0ec46a415b30470ea4736e5d4b512e497fd9eab1f8cac79e1f531d7b5291597 147108 libgd3_2.1.0-5+deb8u2_amd64.deb 35b26b4bb880cc7b04f029648b4b17f40489d2865b002206b8c31a79f76bb8c4 315044 libgd-dbg_2.1.0-5+deb8u2_amd64.deb f818468b0444379b5ef9cc95025e3929c666f9a8931cb37e3cc40997693b903e 1226 libgd2-xpm-dev_2.1.0-5+deb8u2_amd64.deb 54e405d17d3554dfc5bd9f0f08d93320a36d6d398958af9339c5a7f7468034da 1234 libgd2-noxpm-dev_2.1.0-5+deb8u2_amd64.deb Files: 8cd8fa15b3427922cc54ba6d92ad0ed3 2467 graphics optional libgd2_2.1.0-5+deb8u2.dsc 03588159bf4faab9079849c8d709acc6 2004304 graphics optional libgd2_2.1.0.orig.tar.xz 6173306342db643359534dc14e2693b7 37612 graphics optional libgd2_2.1.0-5+deb8u2.debian.tar.xz cb9147730c8a5b753505d6c427cc6baa 41818 graphics optional libgd-tools_2.1.0-5+deb8u2_amd64.deb 147a26fc313b945423a1603c518ea429 285822 libdevel optional libgd-dev_2.1.0-5+deb8u2_amd64.deb 1894d2367bd55c4da93a5cdb9d836f83 147108 libs optional libgd3_2.1.0-5+deb8u2_amd64.deb 46c2d3c5886117efc95a8cffd18cd30e 315044 debug extra libgd-dbg_2.1.0-5+deb8u2_amd64.deb 71105078341d00fe776968a30f4273a1 1226 oldlibs extra libgd2-xpm-dev_2.1.0-5+deb8u2_amd64.deb af257237ce30b171cd2e3d6c14bd4c93 1234 oldlibs extra libgd2-noxpm-dev_2.1.0-5+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJXPvNmXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzMEI5MzNEODBGQ0UzRDk4MUEyRDM4RkIw Qzk5QjcwRUY0RkNCQjA3AAoJEAyZtw70/LsHGoUP/1mWk0Kd9G2jHz49iw+fdYl/ 19CeyocbnyoIDDWxGHPVjG4r0U2R2tpbxPRDzql6n1OGRdp3npFroKEbAmXNKOzq WH05uY4fJsb/yZFSrn0TxcpmupAFmUaRxpiTsb343qeWMT2tZprA84Zqis7OFA+m 8oo2g3WLNJA+9yW3LkOHhHxyH6MRBFqjyELRxYUUVGKWcQd69YErBsHOGXpo0cWg Adcu5UwAi0O4gSDQvql9ANT/sMndl88khz+GMv3msS1qP+p9CavQI/fN5Sba/942 HDI2HsHlK8TkehelXCDOs2YUBlyBO6RiCR1ezaXUr+3UMUtxk2t9S9s1eSRMT1dP Um8HVdY+tU+UZ3chPiua9jHOsuBYvjaPe3d1TQ8vhxvtprVN14Y2gXlpBECVTX2L HAujLEi4uZTTdS9Xw7D8n0TCZuRNtMKWni3u3ZXEBdN19zu3g+fwmKfNpvjeveBo GsdvCY0a+AeczFomPVtqCYqWJjY3EUN83PqnUeqriWuUY2fjIYDjKhJJMLuiJRRU PZ/uiy2NwWx5RASXQSY2BtZdBQeZ+HCGZ9EFVmBY5uYKuUs7YQhxbsmXBtxnbR4o /F+/tAvQqiPT8kdh0b4aDNDvlsyUfA4o9vc6e+kzL8O7ArFShgDa1Yh6ktpQF4D6 YTZbXeZbvGcS3+NVkZ9f =ZBmt -----END PGP SIGNATURE-----