Accepted libsixel 1.5.2-2+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 06 Sep 2019 16:11:01 +0900
Source: libsixel
Binary: libsixel-dev libsixel1 libsixel-bin
Architecture: source
Version: 1.5.2-2+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: NOKUBI Takatsugu <knok@daionet.gr.jp>
Changed-By: NOKUBI Takatsugu <knok@daionet.gr.jp>
Description:
libsixel-bin - DEC SIXEL graphics codec implementation (binary)
libsixel-dev - DEC SIXEL graphics codec implementation (develop)
libsixel1 - DEC SIXEL graphics codec implementation (runtime)
Changes:
libsixel (1.5.2-2+deb9u1) stretch; urgency=medium
.
* d/patches/0001-Add-malloc-size-check.patch: fix CVE-2018-19756
* d/patches/0002-assign-default-error-message.patch: fix CVE-2018-19757
* d/patches/0003-add-limitation-to-width-and-height.patch: fix CVE-2018-19759
* CVE-2018-19761 is not security issue
* d/patches/0004-size-check.patch: fix CVE-2018-19762
* CVE-2018-19763 is fixed by 0001-Add-malloc-size-check.patch
* d/patches/0005-check-error-for-jpeg_read_scanlines.patch: fix CVE-2019-3573
* d/patches/0006-check-number-of-repeat_count.patch: fix CVE-2019-3574
* d/patches/0007-fix-memory-leak.patch: fix CVE-2018-14072, CVE-2018-14073
Checksums-Sha1:
164e7c7dedbf9f678d33cfc183ddb814a8704e96 1897 libsixel_1.5.2-2+deb9u1.dsc
3578c75636113fd90e6fed9ae450e00faebf4a03 5960 libsixel_1.5.2-2+deb9u1.debian.tar.xz
ec497666a417813446b175e6f2b07b53bf6bfbb8 6991 libsixel_1.5.2-2+deb9u1_amd64.buildinfo
Checksums-Sha256:
4208398601bca60f81cab192c6bf12271b18cfa5d6ee8468f09746b61f78727f 1897 libsixel_1.5.2-2+deb9u1.dsc
6e507bf58baa69264ae02de2d557cf5032a662f88932d3dfda9200a3388b5a84 5960 libsixel_1.5.2-2+deb9u1.debian.tar.xz
c6c8fdb60e6398450888eb0b02f7454336be77a03589edbc8c541d17b3ab743c 6991 libsixel_1.5.2-2+deb9u1_amd64.buildinfo
Files:
0a0e9a82082ba654659f8e8a5f7f0fae 1897 libs extra libsixel_1.5.2-2+deb9u1.dsc
5fa12aa4c1609dd9c8ed8f7391b96178 5960 libs extra libsixel_1.5.2-2+deb9u1.debian.tar.xz
6a4dd6d645f41bb6ce1e8ba28c8ddea5 6991 libs extra libsixel_1.5.2-2+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=r5Lv
-----END PGP SIGNATURE-----
Reply to: