Accepted gnuplot 4.6.6-2+deb8u1 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 26 Nov 2018 19:03:02 +0100
Source: gnuplot
Binary: gnuplot gnuplot-doc gnuplot-nox gnuplot-qt gnuplot-x11 gnuplot-tex gnuplot-data
Architecture: source all amd64
Version: 4.6.6-2+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
gnuplot - Command-line driven interactive plotting program
gnuplot-data - Command-line driven interactive plotting program. Data-files
gnuplot-doc - Command-line driven interactive plotting program. Doc-package
gnuplot-nox - Command-line driven interactive plotting program. No-X package
gnuplot-qt - Command-line driven interactive plotting program. QT-package
gnuplot-tex - Command-line driven interactive plotting program. Tex-files
gnuplot-x11 - Command-line driven interactive plotting program. X-package
Changes:
gnuplot (4.6.6-2+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2018-19490
* CVE-2018-19491
* CVE-2018-19492
Various overflow cases have been found by Tim Blazytko, Cornelius
Aschermann, Sergej Schumilo, Nils Bars.
Patch CVE-2018-19490-19491-19492.patch fixes corresponding upstream
bugs:
Bug 2088: term.c(strlen_tex)
Bug 2089: metapost.trm tgif.trm (arbitrarily long font name)
Bug 2092: cgm.trm overwrites trailing '\0' in default font name
also context.trm emf.trm
Bug 2094: also post.trm
Bug 2093: datafile.c expand df_line on input as necessary to hold
string data
Bug 2095: eepic.trm (EEPIC_put_text) ignore request to print empty
string
Checksums-Sha1:
e6446c19eefb929c5054228c3f9501f598a69bd0 2760 gnuplot_4.6.6-2+deb8u1.dsc
012bd22b7be32da186b6bb015c0c6d876926c90b 5059214 gnuplot_4.6.6.orig.tar.gz
2ca3d6e2994823a6ffbf774dcb45f5e749378c39 28148 gnuplot_4.6.6-2+deb8u1.debian.tar.xz
d4d057060357147bb0fd7b80644a3c81b7412ce9 100438 gnuplot_4.6.6-2+deb8u1_all.deb
8f748e816b104bcbb2a0372b0c8168b02aee68e5 2840094 gnuplot-doc_4.6.6-2+deb8u1_all.deb
ce23ee507a6506a1fa9e6afb2678ed007590ce3c 832104 gnuplot-nox_4.6.6-2+deb8u1_amd64.deb
66d22f776582f94a8c8ef4b65f79bd3732fe33de 952194 gnuplot-qt_4.6.6-2+deb8u1_amd64.deb
cef95e3591991d062947cef5f81279f685f0842a 880870 gnuplot-x11_4.6.6-2+deb8u1_amd64.deb
e02fb980f2ae686f3a01390440c1f7ab10e74c3a 103468 gnuplot-tex_4.6.6-2+deb8u1_all.deb
080e02083cd61853a6a9669a55726ce2fa8c3e23 148248 gnuplot-data_4.6.6-2+deb8u1_all.deb
Checksums-Sha256:
bbd32f9ba0dfd6ae0877a71af4c789118400667c87586a347bb259d79e8d7344 2760 gnuplot_4.6.6-2+deb8u1.dsc
1f19596fd09045f22225afbfec11fa91b9ad1d95b9f48406362f517d4f130274 5059214 gnuplot_4.6.6.orig.tar.gz
20f21f29f99dca64602bac7a28c09243e66d2bf432171d15d278ad0b4ef4691f 28148 gnuplot_4.6.6-2+deb8u1.debian.tar.xz
1dfccba312f22c2e5710c92519d8d56e48a1201484e0883418e2d2aecdf71a84 100438 gnuplot_4.6.6-2+deb8u1_all.deb
bf2ab219d1f053f10142f982868ff5f0048f5745d2143ce48638bc7dbde5e21c 2840094 gnuplot-doc_4.6.6-2+deb8u1_all.deb
8468f4632f90120f745b880b8ae130bd98ec1fc92914e0c0971e2c524bba578d 832104 gnuplot-nox_4.6.6-2+deb8u1_amd64.deb
6ce31aea63577cbe22d150d317e08da6d5dc55f7b3d4db12e64c0ce0398b39b1 952194 gnuplot-qt_4.6.6-2+deb8u1_amd64.deb
4de6ed1a8dad70c906df6bb2172444e120b6a38e77a06d64dbe3e5027c132fcf 880870 gnuplot-x11_4.6.6-2+deb8u1_amd64.deb
4b3011a318d45b4b19d5f882482018e1b5c8c1a84e384d8840ad669bfb42237c 103468 gnuplot-tex_4.6.6-2+deb8u1_all.deb
d6924c371ab7f91c93c2c330637f2a7b81c82f3681e17a3382123ac8ef8a110c 148248 gnuplot-data_4.6.6-2+deb8u1_all.deb
Files:
78d0910a25376187b41d9384b3e8d424 2760 math optional gnuplot_4.6.6-2+deb8u1.dsc
02a980b37ba181f7510816ed6440c9c1 5059214 math optional gnuplot_4.6.6.orig.tar.gz
b5be6ffeae70ccd5c78dfd93d5fa2f6e 28148 math optional gnuplot_4.6.6-2+deb8u1.debian.tar.xz
c8f31aa7ea04fc5f11f6a98e6ad0cec5 100438 math optional gnuplot_4.6.6-2+deb8u1_all.deb
986e196d85b2ffcfde854878ab8ed4cb 2840094 doc optional gnuplot-doc_4.6.6-2+deb8u1_all.deb
4df9d1dec9a9ae09a04d35d060ad6b14 832104 math optional gnuplot-nox_4.6.6-2+deb8u1_amd64.deb
e500bf509acb6f61ac35b28ef833f82e 952194 math optional gnuplot-qt_4.6.6-2+deb8u1_amd64.deb
b70c9f3d9792286745995013f49984c8 880870 math optional gnuplot-x11_4.6.6-2+deb8u1_amd64.deb
bb07e893a691942ee7ffb878a88da434 103468 doc optional gnuplot-tex_4.6.6-2+deb8u1_all.deb
3199e67ac35b460a7cb8e4ef1e99c7b6 148248 doc optional gnuplot-data_4.6.6-2+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----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=Qr3H
-----END PGP SIGNATURE-----
Reply to: