-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Jan 2017 18:14:37 +0100 Source: libxpm Binary: libxpm4 libxpm4-dbg libxpm-dev xpmutils Architecture: source amd64 Version: 1:3.5.10-1+deb7u1 Distribution: wheezy-security Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: libxpm-dev - X11 pixmap library (development headers) libxpm4 - X11 pixmap library libxpm4-dbg - X11 pixmap library (debug package) xpmutils - X11 pixmap utilities Changes: libxpm (1:3.5.10-1+deb7u1) wheezy-security; urgency=medium . * Cherry-pick upstream commit 71584b5e2c6, fixing: - CVE-2016-10164: heap overflow when parsing maliciously-crafted XPM files. Checksums-Sha1: c9c2b92d824af25ceeb3b1fac4666d787dd26ab1 2148 libxpm_3.5.10-1+deb7u1.dsc dd49d4856ee1dbc24dc899a5c778db67de2dd623 505139 libxpm_3.5.10.orig.tar.gz c3ec7eed6e685b5ee075635753a35ec53ef89def 16493 libxpm_3.5.10-1+deb7u1.diff.gz d4b6c1dbc0015ae16a5bc376a7cb7fa2297ba8c8 50390 libxpm4_3.5.10-1+deb7u1_amd64.deb ec91ceb838dfd6f7e23398c67cc7714e6f620580 94634 libxpm4-dbg_3.5.10-1+deb7u1_amd64.deb ff7574a4398612cd8721733065af9fa647071840 107668 libxpm-dev_3.5.10-1+deb7u1_amd64.deb f1d2511a07225839392a4180d52e16791e37c684 37986 xpmutils_3.5.10-1+deb7u1_amd64.deb Checksums-Sha256: 772afa906c24814fd8a6afd918bd3e68ebc509da75ddac81f663d1b319f9e189 2148 libxpm_3.5.10-1+deb7u1.dsc f73f06928a140fd2090c439d1d55c6682095044495af6bf886f8e66cf21baee5 505139 libxpm_3.5.10.orig.tar.gz f1f6c2f96b0d29505353dc831f76fd2d68b61f528480a087b444bbdccb63b836 16493 libxpm_3.5.10-1+deb7u1.diff.gz 6886107bb8e746ba688fe6c9279298721809e865691d6aff415305487d2d56f2 50390 libxpm4_3.5.10-1+deb7u1_amd64.deb 0f5f9006918f3d368f8bfb73d3c5ef8bd5e3035ffc559ab401672925f9f4a3a8 94634 libxpm4-dbg_3.5.10-1+deb7u1_amd64.deb d9ddf68cdd9566090cf0423bf6ceb58165a51b811723dedb7f2ed17d0aa61092 107668 libxpm-dev_3.5.10-1+deb7u1_amd64.deb 5cf2ac65fbb5b74eb9d95d0d9417e1f5cb97947a60de5b473e91d748267e22fb 37986 xpmutils_3.5.10-1+deb7u1_amd64.deb Files: 596ccd27343e694144c599e990737822 2148 x11 optional libxpm_3.5.10-1+deb7u1.dsc a70507638d74541bf30a771f1e5938bb 505139 x11 optional libxpm_3.5.10.orig.tar.gz cd3928bf9857ae2a6bc5accaf2e90ec4 16493 x11 optional libxpm_3.5.10-1+deb7u1.diff.gz 736345f7a666facad1aa07f196d55d78 50390 libs optional libxpm4_3.5.10-1+deb7u1_amd64.deb a5e45a68f6fbeee6f351230587238610 94634 debug extra libxpm4-dbg_3.5.10-1+deb7u1_amd64.deb 67d00a3ce53519049cdf6410089e74e4 107668 libdevel optional libxpm-dev_3.5.10-1+deb7u1_amd64.deb f8897c45d7d1473f50c80f7b4550ad08 37986 x11 optional xpmutils_3.5.10-1+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAliI5jUACgkQnUbEiOQ2 gwI4NA/+MRkFnN9OyXSdl2XeOtWHGvPghDnl6+sWVJ1srK7zu49maUkDoP1qSEWj R1SHwvhNyzjlgHRK+VUpNskezXBX8PPZXORiIMfjAbglsFYqTOtlvPNdw9zI24k4 2GgX3xjwQiLefcCms+3YJp63OhF0Fq9tokmx/AmFUXPGxd+Q0mbPOW+HJEK3e6X9 +tHHhb9hUj7ywJkpmpOTjZ/5xmtYSGN0vrRoPIOVp1BK3VAJdLfS30jPS5VHrAwQ NaouMf/Uxl+hE4PBMXTYmCYpGEPnWjLt+TpYie7s3zefY9D60H/St/17I1xtgsOr 2zdS+GAXo+/CIGUlsog784WZvJdbSe9ROp2BzKgB7oekwCR1DvCX3w4UGcd3k2+y jd+npJ8e8K3ndhJ+bNr2FjfNy/16UCVDKvJCQnz0rjPa15QuM5X4hL48fNGiOKNI KqEaU7285rfJRrQ0LaNIbDwfDKakHK+KWEalXGAauUJuGZ13BjL1CwUYTLCntNIc th4rUNyOJIPO8UntF/pswkLiB+ipHTzTd6a3rU8ey4bORt2bLAPI81AnKpP66I3m 0CDJF4sSgeok28uuMpWovQMpl92nSnPtdplhOfbY+3aZfvK+aOqWTvjfxoy5oi2j /RT7Te2ead0lNTJV4SZqeC7zp1xvq4gRqUmcBn5wFXO0hMGXuDg= =GXGx -----END PGP SIGNATURE-----