From ftpmaster at ftp-master.debian.org Sun Feb 12 22:17:18 2017 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Sun, 12 Feb 2017 22:17:18 +0000 Subject: [pkg-GD-devel] libgd2_2.1.0-5+deb8u9_amd64.changes ACCEPTED into proposed-updates->stable-new, proposed-updates Message-ID: Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Jan 2017 13:35:12 +0100 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 libgd-dbg libgd2-xpm-dev libgd2-noxpm-dev Architecture: source amd64 Version: 2.1.0-5+deb8u9 Distribution: jessie-security Urgency: high Maintainer: GD team Changed-By: Ond?ej Sur? Description: libgd-dbg - Debug symbols for GD Graphics Library libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd2-noxpm-dev - GD Graphics Library (transitional package) libgd2-xpm-dev - GD Graphics Library (transitional package) libgd3 - GD Graphics Library Changes: libgd2 (2.1.0-5+deb8u9) jessie-security; urgency=high . * [CVE-2016-6906]: Fix OOB reads of the TGA decompression buffer * [CVE-2016-6912]: Fix double-free in gdImageWebPtr() * [CVE-2016-10166]: Fix potential unsigned underflow * [CVE-2016-10167]: Fix DOS vulnerability in gdImageCreateFromGd2Ctx() * [CVE-2016-6906]: Fix OOB reads of the TGA decompression buffer * [CVE-2016-9317]: Check for oversized images * [CVE-2016-10168]: Fix signed integer Overflow gd_io.c Checksums-Sha1: 22df92707c8bce03da92656a9ea69b6ffd37232f 2481 libgd2_2.1.0-5+deb8u9.dsc a0bdbcc31dd16d7a79a8a49063ff88957c148a20 37876 libgd2_2.1.0-5+deb8u9.debian.tar.xz 7a39f57c351476007bebdd4e86119fc78075be61 42528 libgd-tools_2.1.0-5+deb8u9_amd64.deb 00f9403f0a6c8c70c0d4f11f9e0d1b777106bc93 286876 libgd-dev_2.1.0-5+deb8u9_amd64.deb 46766ca001c55b454fa6444915df29a8260d9bee 147916 libgd3_2.1.0-5+deb8u9_amd64.deb 2d7312d9b3b4c509915fbd4319ab6e3c8c4f2335 314166 libgd-dbg_2.1.0-5+deb8u9_amd64.deb f0b57cd29b83a9dd9ae85c80fd806741e059a513 1234 libgd2-xpm-dev_2.1.0-5+deb8u9_amd64.deb 6779a657e15045258b5159721f09ae9744e678e1 1242 libgd2-noxpm-dev_2.1.0-5+deb8u9_amd64.deb Checksums-Sha256: 2d12d2498cc99e9323a6bc1612fcdc2179201a1cf396c1cece27b3a2e027c00b 2481 libgd2_2.1.0-5+deb8u9.dsc fcabeec555ac03ac20d286ae3f50e21aee8a6f6a11057e3149c071bd3210a4c4 37876 libgd2_2.1.0-5+deb8u9.debian.tar.xz d3c2acc2854b1d71151e47c252c0be8f7ce07177e88efaa64d30931b788a7f59 42528 libgd-tools_2.1.0-5+deb8u9_amd64.deb 8dcaad7caee11122d6fb6aa246c36a08e35225474bb665929e612615524a3f87 286876 libgd-dev_2.1.0-5+deb8u9_amd64.deb 2bb676e08395f3f5044348ab86dda4d6881f0749bc6b9434343aa5de38a90058 147916 libgd3_2.1.0-5+deb8u9_amd64.deb adac961a1d017c3993e673c64266cbc2fbef3a76bb97e2a915b508ddda433eeb 314166 libgd-dbg_2.1.0-5+deb8u9_amd64.deb adb3fa21214e9229d720ad874722e76fde28fd9fccdb310592885d91bb43a6a2 1234 libgd2-xpm-dev_2.1.0-5+deb8u9_amd64.deb 3f09f9fbb54c22020013d5995b760c8647d86498e51bde7891eb367739c37cad 1242 libgd2-noxpm-dev_2.1.0-5+deb8u9_amd64.deb Files: 7d948aa445a8ae541444535468fa4115 2481 graphics optional libgd2_2.1.0-5+deb8u9.dsc fafc27b162f2b39b7dc0aeb0bf167bac 37876 graphics optional libgd2_2.1.0-5+deb8u9.debian.tar.xz b6e27bf31373598041260e59ec2402a4 42528 graphics optional libgd-tools_2.1.0-5+deb8u9_amd64.deb 9c13f9e75d84f6f9a1af051001a9847c 286876 libdevel optional libgd-dev_2.1.0-5+deb8u9_amd64.deb 8e85f10f8a1bfe9562df4d3060f49002 147916 libs optional libgd3_2.1.0-5+deb8u9_amd64.deb 598df3201af21908ac4f217e80461d35 314166 debug extra libgd-dbg_2.1.0-5+deb8u9_amd64.deb 9042bff18b69a866f1b355086787dce4 1234 oldlibs extra libgd2-xpm-dev_2.1.0-5+deb8u9_amd64.deb 832e8f628496b82151cf0cef04b713d0 1242 oldlibs extra libgd2-noxpm-dev_2.1.0-5+deb8u9_amd64.deb -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAliPHt5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8 uwd0zg/+KVCM3ZL1v51oGlv6jtS7UsDARZC9cdQ0MFxjmIHfhRVndmuTzyOATtyk INY7p60O7HkgYhmsRP7XDFlN1jgXujNgKLpFyGQFUGr/H9AVefDANP+d5G0wTSZ2 di7zx/MdfbxC494qRPDUCziDDPEDq44XECUgTAT1d9QIKhghobxOeQRRrktr0bvK A+z5onYrAv+aXieHu0/vuztc8DyOPwrl/VVg91rfUddw1TqziYXJ/qO9iX3aVsTQ a9kLLbzugQ4eChXMzwuK4pRaG4PljIHMA8YqW5YHwRnd/RhZzY4lo90M+GhJNfb1 JL9iT65Gx0dTHjmF+gStScwZdmHa+LyznSK7kXVDH0608e0EZQUK5NDcr1Pi56NS pzJugfcltR9For3/oN9hYynf2OLwnhZ9SzgKNziyEkwwpmQCLgQCfAWxlMdJv0Gj Vpomj8xqu8YlNSQv0cam3t0qYPdi56iA9Ey/nO6xg9RH4ZOlSjVHrJykyaTmmzRd hSi3YQn3R2XwgSHV+lPv/CcHNwZbA/nY3ud5hm9yAqILUXq4lxgGJJKLUdP1QV/a 57ctYVBwn+RA5v4L8CBWmpCIt5hnjTfMGYOekPvkQPKmUU/EDmeXT+RklN9SNe3Y pTJoXH4zS22tv2jzI74DQ7kcmnarEZUA6N2Wjhifr87I7U9Mmjo= =Eu0E -----END PGP SIGNATURE----- Thank you for your contribution to Debian.