-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Apr 2018 17:48:42 +0200 Source: sam2p Binary: sam2p Architecture: source amd64 Version: 0.49.2-3+deb8u2 Distribution: jessie Urgency: high Maintainer: Tanguy Ortolo <tanguy+debian@ortolo.eu> Changed-By: Markus Koschany <apo@debian.org> Description: sam2p - convert raster images to EPS, PDF, and other formats Changes: sam2p (0.49.2-3+deb8u2) jessie; urgency=high . * Non-maintainer upload. * Fix CVE-2018-7487, CVE-2018-7551, CVE-2018-7552, CVE-2018-7553 and CVE-2018-7554. Multiple invalid frees and buffer-overflow vulnerabilities were discovered in sam2p that may lead to a denial-of-service (application crash) or unspecified other impact. Checksums-Sha1: 2dce6d826ba5e11fb20a51a1b81e9dd362d0179b 2038 sam2p_0.49.2-3+deb8u2.dsc a13b12ffe5c5c86294832add8d3aaf95ebca0b4a 23064 sam2p_0.49.2-3+deb8u2.debian.tar.xz d4adfb72f9961c9c6fdd4d833bec317b9a69e0f0 240266 sam2p_0.49.2-3+deb8u2_amd64.deb Checksums-Sha256: fc3f18ff2e99ddb44803f122dd49c71de135f7d619ed1b5e11ebcb4955af450e 2038 sam2p_0.49.2-3+deb8u2.dsc 1d3c64ec1ae3c172898c91f6e4d817a1c3de7a9edc4c39ea4d49e4477f7b2742 23064 sam2p_0.49.2-3+deb8u2.debian.tar.xz ceb530d4ab1e3b6205cbd0ce7b060b94d475561c4d115c185fb179fdaaa4d8f2 240266 sam2p_0.49.2-3+deb8u2_amd64.deb Files: 70ce5bc6a86e5a79ba79813dd684b85e 2038 graphics optional sam2p_0.49.2-3+deb8u2.dsc cb4707417a1785b637b6678ba7ee8365 23064 graphics optional sam2p_0.49.2-3+deb8u2.debian.tar.xz f36b698afdf6e92171f822a6ed282377 240266 graphics optional sam2p_0.49.2-3+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlrl0thfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkGXMQALdHHZuSdJGNcAp5jVNAcFDhDs1o3lRRmgJX Lgw2r95Acgl7KfdRYjbyI4d5TulrXZPHSjv/8MynRZ/p6UGe+ozCUs3jYK84Aqjm yYgDojUaICl+ZPMNo8l4Z4XGtzPd6V0uZAZxKrFeRZQ3NxVW9N7+oVFNe936EOjE M+xbCSt7wF1yuP8SbDe8hk33gaRbfhRZhAy/fvlrxxyajXvPLQ4MSHGJcB1JMr3K mPGLNckHOA6U9eDEXUV0FdZjMjnbQW9ef/+LmWSM/OWX5E1xQgRD1uV1jYdI0Fpa 6aDccVIIlU2P6cZy8EyQtVA4dwLaOgAxb8cAXjBegITylVKEXOz27ZRLjhm09c4P Q3txwnJK5vaHwOIkhU0F2Lg2SdMqNxUJydid8bqtmJDkrP0/sW88yYE5yDQSa/9Z gPYrEdPMUfmCgBIwQ5EsDlIMb43kOnZPwdIjpSRUkcs9Rf2Xs1xRY8wa74cHcc1L CSU99nitW2pezWlyoQ3et4mHDOW0PTqlL/q7WFZsIbt+hqGlCdZi77BrOW4PSjV0 VlJNNvpYnORahjqnV2DKipNBKbP7ccVwHXHmxeniVA79D28tDq+b9RNosZI7j4NF VbmpkuK84mYIq5sT8NjMu2CLl22CciHLdyX+s0mVSJrsszxa9JzQa49NMpGRXjIh tAcnhoXc =iycD -----END PGP SIGNATURE-----