-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 04 Apr 2018 23:13:09 +0200 Source: sam2p Binary: sam2p Architecture: source amd64 Version: 0.49.1-1+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Tanguy Ortolo <tanguy+debian@ortolo.eu> Changed-By: Markus Koschany <apo@debian.org> Description: sam2p - convert raster images to EPS, PDF, and other formats Changes: sam2p (0.49.1-1+deb7u3) wheezy-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2018-7487, CVE-2018-7551, CVE-2018-7552, CVE-2018-7553 and CVE-2018-7554. Multiple invalid frees and buffer-overflow vulnerabilities were discovered in sam2p that may lead to a denial-of-service (application crash) or unspecified other impact. Checksums-Sha1: eb0ea227b538cd5303311224f53c4f96c88549ed 2070 sam2p_0.49.1-1+deb7u3.dsc 89bee4a5d4b7031dc4c7558e2df79ffc5bc26f83 22768 sam2p_0.49.1-1+deb7u3.debian.tar.xz 4e8b0921ca1d2c14ff53ffecd328b19687b991ba 258540 sam2p_0.49.1-1+deb7u3_amd64.deb Checksums-Sha256: 23362cbc715aea4099025889a8b1d53fd27765f4a87f56fa72a47cac4053a8e7 2070 sam2p_0.49.1-1+deb7u3.dsc 3403a87f619a8edbd307a17488b00b29c57c61cf627bca053394730505ba86e7 22768 sam2p_0.49.1-1+deb7u3.debian.tar.xz c89d795425a5ab808219ac7588a2f773e7465df936717a4a5ef69c5f62b9f460 258540 sam2p_0.49.1-1+deb7u3_amd64.deb Files: 93d1db2675fa783aa953deefeba94a28 2070 graphics optional sam2p_0.49.1-1+deb7u3.dsc 215ee6a38a258b17a761dec3b95fd9be 22768 graphics optional sam2p_0.49.1-1+deb7u3.debian.tar.xz 28710b3b9632de81671697c8f1638c35 258540 graphics optional sam2p_0.49.1-1+deb7u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlrH3j9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk4e4P/ib1KwSTfK1ifF7O4kPaGBbNzOG7a3JADdzl aBUObFP9OkbbNN0tAE7yCQltUdcyadGGLaNtt54zWBcvtzwvsREzHUdvtD9ysdlP WqTeTsV2WbH5MAzcjpzcjcu7UxDRL3r2YGrYZWlG7O5ALm9wvHiI0l0jBC4x8gjG bqfd5zXlFb0PuiFRyrtXHB8Vs+ENIXr+Gmx24eTcFvcqrMijKXI3f88aGTeJ+3lp AJJSdw+DVXV0/k6nZvzNr53o6DvNedCAD8O1BKDMetR4AyEFUN3N54cY2TB63vGf 6HyB5rTFrfdwCe0blJEe9opMdNiy+xQJ3c8KSAZb5oN3Kj0+Vuk/HX/dhiUUCMS6 qPmDuyerlFTqEuXF76hJ4CDRS6KYsckmRO5jVwbp/9Ueybjnzaol8Lt2pDirXZsZ L47YcSjb6musOla4n0llBl8/PqUCS3pqJMhtTloDXJe3bI7/yg3atzCNoNm22liI 7kwrW5Kp8drSMDyMxdKPMv8q5KY/QZr8IbH44UFVeeNPfPlkx4LhjU3h2R5/nrbe 5/QkLxbvpbJCbX1bEhkfx0SWNER4q4xTsBIOZ4vVVxze5M+kCIIqbJE7G3qA/4Io 0C45zxLUEsDqwmAdZ5t10Y3sZHzPGMSbAc318PKUtzVreeKi0jKpDCbJQ4708oa6 aSRqXU42 =UBkC -----END PGP SIGNATURE-----