-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 04 Dec 2017 19:39:39 +0100 Source: libextractor Binary: libextractor3 libextractor-plugins libextractor-dbg libextractor-dev extract Architecture: source amd64 Version: 1:0.6.3-5+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Bertrand Marc <beberking@gmail.com> Changed-By: Markus Koschany <apo@debian.org> Description: extract - displays meta-data from files of arbitrary type libextractor-dbg - extracts meta-data from files of arbitrary type (debug) libextractor-dev - extracts meta-data from files of arbitrary type (development) libextractor-plugins - extracts meta-data from files of arbitrary type (plugins) libextractor3 - extracts meta-data from files of arbitrary type (library) Changes: libextractor (1:0.6.3-5+deb7u1) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2017-15266, CVE-2017-15267, CVE-2017-15600, CVE-2017-15601, CVE-2017-15602 and CVE-2017-15922. Leon Zhao discovered several security vulnerabilities, NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors and out-of-bounds read that may lead to a denial-of-service (application crash) or have other unspecified impact. Checksums-Sha1: 4b7e5d4a31bdf8151e07baed39368ff4372a5e16 2525 libextractor_0.6.3-5+deb7u1.dsc 58ca71d04fcbac6ea9675bd91ffa18a26c865ebc 1381932 libextractor_0.6.3.orig.tar.gz 9cf7619803c92e8c90446c1e952ce51a24ca9e3e 10995 libextractor_0.6.3-5+deb7u1.debian.tar.gz 69b86712dbc9e69c8863ad1e4df77642142b3a36 144312 libextractor3_0.6.3-5+deb7u1_amd64.deb 2d33c8acfcea9b2fc504c8932165e6feaae765f8 47060 libextractor-plugins_0.6.3-5+deb7u1_amd64.deb 139755cb0bea5bb9afb6b227a84163aef1eebccb 498018 libextractor-dbg_0.6.3-5+deb7u1_amd64.deb e3888f0a4dd38fc34f8845c13859c2a88d7c4676 25526 libextractor-dev_0.6.3-5+deb7u1_amd64.deb 875e8e6536830c1fe9cd42615222394248665cdb 113506 extract_0.6.3-5+deb7u1_amd64.deb Checksums-Sha256: 9e3e3d7bb403d4ef1b40e807cf56730ed19278f41ec59b80c550f0b0e464972e 2525 libextractor_0.6.3-5+deb7u1.dsc 0c3afd11b77eed90d59210a947bc609b9c8adffaf656c5c665a982aa665ab5ba 1381932 libextractor_0.6.3.orig.tar.gz b9b537091aa14ae483b79fc61c2caafb774c769947d33b26715dcf338ce1234b 10995 libextractor_0.6.3-5+deb7u1.debian.tar.gz 745af6b425a73da06856ad9e4eed453c7af9cede2c45be8c36403ef387ce5122 144312 libextractor3_0.6.3-5+deb7u1_amd64.deb 7115d503bc84654ad4d830faa021d1d5b79da42f03b64693d7974b6e4b097caf 47060 libextractor-plugins_0.6.3-5+deb7u1_amd64.deb 937608be277a8fc8946f46d8a855e4b5d853708ac60af6421e68cb40ab03df8c 498018 libextractor-dbg_0.6.3-5+deb7u1_amd64.deb 2b225e5d376187436180da2d3f2687a88a4429772b599f55bfa2cfa4011efc24 25526 libextractor-dev_0.6.3-5+deb7u1_amd64.deb 5a31ee4db24cec129fb7a27bda4ffba35bd4b944bd3800e25192510bc00348a2 113506 extract_0.6.3-5+deb7u1_amd64.deb Files: 06cef08cbdedc2cb2314e6fee3135b14 2525 libs optional libextractor_0.6.3-5+deb7u1.dsc 7004ff6be06e400050f0ad7016140981 1381932 libs optional libextractor_0.6.3.orig.tar.gz 1976d989d1bcb71953ee87ff049b8a48 10995 libs optional libextractor_0.6.3-5+deb7u1.debian.tar.gz 9e5d4c898cbadafbc6460b339a48ac09 144312 libs optional libextractor3_0.6.3-5+deb7u1_amd64.deb f0ae2c95b17452a51d98ff8c4cefb553 47060 libs optional libextractor-plugins_0.6.3-5+deb7u1_amd64.deb e0fec42a34c71f60b0f7aa991c11714e 498018 debug extra libextractor-dbg_0.6.3-5+deb7u1_amd64.deb 722737ebcbb6c8104e67392dd1601d56 25526 libdevel optional libextractor-dev_0.6.3-5+deb7u1_amd64.deb ef8e266521b716cb6b57932bf40bbbc6 113506 utils optional extract_0.6.3-5+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlolmwhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkZQMP/A88YPtFxLJJXWHlRcMLBcmgeOmyUL+ZCDha 25Wje+V3jhuu8D6nBgCIQF5oBAQt2LiaGy746EdYV0BtbEcmssWkodsFdE+9TSkw FcX5cU6kfz+3Jts6ZO9Eu0xC1J0vpWLyFajRr/tbCxAfYjhm2JXne9Xy+midRH8/ gNTBpaSAVIgdbl+ErYpjBoIfS9LpvsUY69ep2A0ZqxeP9+qj993T50hZidxgcSHo E9e7YUxWtVC7U88hLhw/87T++rMVF76c3CU6mCjS8fGSzzGMpO7FyKbXE0R0nkxl vIgcCh/NzpbZJVL1Y0goT5/7mbgm4AeS+vSd2Mylpp7z7wrgIvRAZZavu7JvgEDQ Gl/Iap82avcklGJNzdaPIJECiJs09xknIu2B/lKhoJsMU1G8svwPeIy7q3yf9R2b o5KL3Rn8xhMVbLhP+6Os6YIylDOsHbHZ3eleKSpN++N4vfphYuiX8VuueFuVUUDp oSTVXxwwo47Nl3/llveygI8FruvTmkihz9cPnd91qVTnYH7WsBcNcEk1ucpFDhmg ium7HW7PDxyHE5jgUXG0KBzpMkqmlva1VznX97WZtKsUhx281fAELFk6bYXLP2zc fi4xFpHFx+xOgYTvtjxtgZ1MnQ/hxeG0iq2FiedqyuyGJxEQiWcjkvmh2ngOIo55 5Imk5SFG =p2lS -----END PGP SIGNATURE-----