-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Jan 2017 08:46:39 +0100 Source: icoutils Binary: icoutils Architecture: source Version: 0.31.0-2+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Colin Watson <cjwatson@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: icoutils - Create and extract MS Windows icons and cursors Changes: icoutils (0.31.0-2+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * wrestool: Make check_offset more stringent (CVE-2017-5331) * prevent access to unallocated memory in wrestool (CVE-2017-5332) * wrestool: Fix an index, additional check (CVE-2017-5332 CVE-2017-5333) Checksums-Sha1: 5a4729b046125392441c617847b929f03c212bb8 2068 icoutils_0.31.0-2+deb8u2.dsc 00abcdfce752a874c19b4290a68a09d6351c92af 6212 icoutils_0.31.0-2+deb8u2.debian.tar.xz Checksums-Sha256: f107eb624d369c14a7cd7b87538cb28f54ccf45332bb3196a71d5b593cca0894 2068 icoutils_0.31.0-2+deb8u2.dsc 2e4c74ba18ef42f95755254f078f369804767d580431886f25e6e025fa1282c7 6212 icoutils_0.31.0-2+deb8u2.debian.tar.xz Files: 0c22768336f0dd62b642abdd150ace08 2068 graphics optional icoutils_0.31.0-2+deb8u2.dsc 84a18e9c2b551b7429701f944eca783e 6212 graphics optional icoutils_0.31.0-2+deb8u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlh52BhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E6Z8P/iV3nMcB7HueGDPj8Eup/V0pZf1ob9N3 WmEiJNZNn9GOAIg/UvZ1eXX1YMcUyYI1pVdzHQXLY71BsKheZL6WXOVCPiKG7wCo MgARifEpSBmHgM1Ht7vg984pFxXt+moYDCZKI8DDyKLCBaUjYL3uilnmNgG0BhW0 tGBe4jOdgTf2KZAs6mvSyTY/dV2pKY+PfcIq436KqFWgN3PGgZIybo8NJX7LNXj5 OHgLCVEJv9HIG7+3D8cVj6wEAqJcE8e5Gi5SNkHIjGM56GzaM8U0dhdurevZ0ojl WuocfrYNCq1KyDpITvrgIlvR2MIRcWRzPevnejFR7cyWQFsB69VUU2cYAb+icJMA z08uWRSQZtc54kwg0rmBc6WzoMmgalfnhi4RnFQVCtaGsgQx7bnt+H3Udkla1Sue pBm3y8ychEcTOOjeqlDvy/67C/Fyl7ivO3T+jereJD1ESbbnifM4gZGEb78NlMhn KJwZqeGxS+PLWpmW2xRWCEDkoezAUHYjvPRRfx/cT5G5qbhnjE2eKqDUNnLsHTDD veJ62prL1rK1Zg3dxcpTmWvyMIq8Wz5usR2bOJKB2L4APvLrkIJAOUYXlrzClRGR 6Esw4luCS59MesPWlQoIO81mXJTqre8nCpq3ho8lHvlzroTsXSQyJ7u884kfNYUO phw3f0je0FXn =SFQv -----END PGP SIGNATURE-----