Accepted agg 2.5+dfsg1-9+deb8u1 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 01 Feb 2019 10:55:37 +0100
Source: agg
Binary: libagg-dev
Architecture: source amd64
Version: 2.5+dfsg1-9+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Andrea Veri <and@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libagg-dev - AntiGrain Geometry graphical toolkit (development files)
Changes:
agg (2.5+dfsg1-9+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2019-6245: A stack overflow vulnerability was discovered in AGG,
the AntiGrain Geometry graphical toolkit, that may lead to code execution
if a malformed file is processed.
Checksums-Sha1:
b15d4150c3065124ab00f6e839f98c688f6222b7 1961 agg_2.5+dfsg1-9+deb8u1.dsc
484d78dd65a489bf1131abf4838dca1d652d2db4 528968 agg_2.5+dfsg1.orig.tar.gz
048a70b0b2a55550ead68612eecbf439017b44d4 7096 agg_2.5+dfsg1-9+deb8u1.debian.tar.xz
ed554a6396dc09c16be07a365ff19c7da7914f05 287982 libagg-dev_2.5+dfsg1-9+deb8u1_amd64.deb
Checksums-Sha256:
5d6446b684eeea49a26a9ca58c43ce10e2d35e232ec222a96889e4a2e5e0c7c9 1961 agg_2.5+dfsg1-9+deb8u1.dsc
85490909fba93bae78d384adb8e7ec742996f33d25486ea0b28a8713fb90a31f 528968 agg_2.5+dfsg1.orig.tar.gz
4ebce7d1cd97d0d8088a15d2301c4a0f789a0ff285f8289e8e68b619daba776a 7096 agg_2.5+dfsg1-9+deb8u1.debian.tar.xz
090e05f0561d122370443088771062c21121dfb6e7a450b856cd1d6236236d48 287982 libagg-dev_2.5+dfsg1-9+deb8u1_amd64.deb
Files:
fd16ebf2ea2dbb57a06a467ee6e69bbf 1961 libs optional agg_2.5+dfsg1-9+deb8u1.dsc
b6dc8d86367f89ba5a6ca0c01716c5f3 528968 libs optional agg_2.5+dfsg1.orig.tar.gz
7fdd74e0dbf9e1501dfc4da98cde6289 7096 libs optional agg_2.5+dfsg1-9+deb8u1.debian.tar.xz
3e0a9336e0bd46eb75e35f395f287f6b 287982 libdevel optional libagg-dev_2.5+dfsg1-9+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=nXwF
-----END PGP SIGNATURE-----
Reply to: