-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 28 Dec 2017 11:39:33 +0100 Source: libextractor Binary: libextractor3 libextractor-dbg libextractor-dev extract Architecture: source amd64 Version: 1:1.3-4+deb9u1 Distribution: stretch Urgency: medium Maintainer: Bertrand Marc <beberking@gmail.com> Changed-By: Bertrand Marc <bmarc@debian.org> Description: extract - displays meta-data from files of arbitrary type libextractor-dbg - extracts meta-data from files of arbitrary type (debug) libextractor-dev - extracts meta-data from files of arbitrary type (development) libextractor3 - extracts meta-data from files of arbitrary type (library) Changes: libextractor (1:1.3-4+deb9u1) stretch; urgency=medium . * Fix CVE-2017-15266, CVE-2017-15267, CVE-2017-15600, CVE-2017-15601, CVE-2017-15602, CVE-2017-15922 and CVE-2017-17440. Leon Zhao discovered several security vulnerabilities, NULL Pointer Dereferences, heap-based buffer overflows, integer signedness errors and out-of-bounds read that may lead to a denial-of-service (application crash) or have other unspecified impact. Checksums-Sha1: 137679424f5acef08d131f0a021c4a350b49f60e 2571 libextractor_1.3-4+deb9u1.dsc 7635df399286e15f4b3b5528ce106be515e17675 17524 libextractor_1.3-4+deb9u1.debian.tar.xz 8ffc24ebef1ea7bff20bf1b538a38c00af29b307 90838 extract_1.3-4+deb9u1_amd64.deb 3c14e0485743c942e0b9025bdfc8f3fdbf934ec9 552352 libextractor-dbg_1.3-4+deb9u1_amd64.deb 737ee526f550e7933f57635cc15aa3c14dea4970 26066 libextractor-dev_1.3-4+deb9u1_amd64.deb 897c68a936145965e21af88ec9d701ec392ee7c3 111710 libextractor3_1.3-4+deb9u1_amd64.deb 03328ef94a21368bf9d7e17b675ec3e89339d16a 17660 libextractor_1.3-4+deb9u1_amd64.buildinfo Checksums-Sha256: 34b3abff8cbf905a31c0c6a990e2e890f1cd9a3e8246991509cf7e665a5492cb 2571 libextractor_1.3-4+deb9u1.dsc e1c4efc98d4168591b899aac4a1b916245c1ada192943f070b554e640a799f73 17524 libextractor_1.3-4+deb9u1.debian.tar.xz 123d7621b3797178a08f06b179ddea913cdcc3f2ef449c6ff97fcd07b2553874 90838 extract_1.3-4+deb9u1_amd64.deb f0d796ac7418f54daddd4a1713437037c73ad037aa985857b2e65ee91e3a4f60 552352 libextractor-dbg_1.3-4+deb9u1_amd64.deb fef8b768ed06930bd413d7d288a243b5ade36c7432cac5faa80999b586859822 26066 libextractor-dev_1.3-4+deb9u1_amd64.deb 27d40263546c7c04810ab1cad1b5faa096a3eecdf77f66fcdb7959757dabc8d1 111710 libextractor3_1.3-4+deb9u1_amd64.deb 09976c8ef178d6ef4183fffd6d6a5db04624b757a926d5ff792ea48d7dcb0a0e 17660 libextractor_1.3-4+deb9u1_amd64.buildinfo Files: e1180fa4e660664a6aea7a7c8229af9f 2571 libs optional libextractor_1.3-4+deb9u1.dsc ec8a646e1d79a132d210e6a3dc9d7c85 17524 libs optional libextractor_1.3-4+deb9u1.debian.tar.xz daf7567c2d554786816898f9935961d2 90838 utils optional extract_1.3-4+deb9u1_amd64.deb 2b709d06d65ec3445c927b017410bee3 552352 debug extra libextractor-dbg_1.3-4+deb9u1_amd64.deb 0bdc90d03d1bb14af90ef3935d662da5 26066 libdevel optional libextractor-dev_1.3-4+deb9u1_amd64.deb e3324beb0de3cda812ce3b2db67a2b70 111710 libs optional libextractor3_1.3-4+deb9u1_amd64.deb 08d6c1cae30b2de393132c3c756fa563 17660 libs optional libextractor_1.3-4+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCAAvFiEEKUUr1GPOZwMj0JuIoEqzutviY+4FAlskxbMRHGJtYXJjQGRl Ymlhbi5vcmcACgkQoEqzutviY+4kdg//cBE7wrxwflH0z+ajUws2lecvZlDLAUbS kPek3cwYtVJQFOjTSwg78Q3o3Gitm7ekQMC6eV5RmqoqPV+5H45BzDeOs6mdaNJs mfJC+SoD8WgaLb0nJ/z4DgUdp8zaVAsZ+EOWCwkJEdHD9JKu+Tw4HK8QXV2DzgGq uzOE0Ych9e3n4Be+772PXSD5ZM2lCPM3iV3BhzlB8Qkv5mKyFSVGKDOKUy1lA41d T2eBhheVbrHPIWmth8bOjevfRj36ZR8cqsBOovDRR/oeDFDoXSFjAcDu/aoJ4iE2 SVcoXFY/9euptGcnqiyqxzaxAxhEbJ7Dv9k4xxxrZt49It5wCjsjCamb5aFy8gev ysypvMmgj4O5w8KcH67M6w+2777GfeVBsuvXtL5NsxEHn6iRcizhIcRHX0ssHhPq 3/Tis9ZQ1v4gLYytjR9WfRHXCQiic6HrxL846zYVspJQs0mjh5GOtOlze7FjaD4N d91YR/rDxXXQ9uf6GaOr/rRxxlFELoj/pNsqvq9AnUgd8rrJqIDC+Q3OE49IUevF akLktE2bdCurYfQBepvipMGFzEq1VW1PzLADZcdOg3qXJAMH1uaKXwVnaqGLCuBa Nb10psQaBwYFte3QF6CwSZ+OJd5SLNouMXn5e/1Yc+N3DF9Uh0vMc6N8bP8svBuB U9BqwIf0t0o= =pPuw -----END PGP SIGNATURE-----
