-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 21 Jul 2025 13:50:32 +0300
Source: djvulibre
Architecture: source
Version: 3.5.28-2.2~deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Barak A. Pearlmutter <bap@debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1052668 1052669 1108729
Changes:
djvulibre (3.5.28-2.2~deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Rebuild for bullseye.
.
djvulibre (3.5.28-2.2) unstable; urgency=medium
.
* Non-maintainer upload.
* CVE-2021-46310: Divide by zero in IW44Image::Map::image()
(Closes: #1052668)
* CVE-2021-46312: Divide by zero in IWBitmap::Encode::init()
(Closes: #1052669)
.
djvulibre (3.5.28-2.1) unstable; urgency=high
.
* Non-maintainer upload.
* Fix potential buffer overflow in MMRDecoder (CVE-2025-53367)
(Closes: #1108729)
Checksums-Sha1:
7f73a9435e614aa4e79aef39845dfb6f3398c605 2407 djvulibre_3.5.28-2.2~deb11u1.dsc
1846a9e3d84e0174ecda6c4bf2dfe11fb86ea487 2959024 djvulibre_3.5.28.orig.tar.xz
2a418efbf77c2029b5dc76685c07b9d61fadd69f 18356 djvulibre_3.5.28-2.2~deb11u1.debian.tar.xz
Checksums-Sha256:
6a0782207620dec3324a92f99512529f19679b27c5629723085921f318403a92 2407 djvulibre_3.5.28-2.2~deb11u1.dsc
1223b7bf7c8dfe2e290882f3bfb88ba2468b30495a1bf8dfd54dc7e810987887 2959024 djvulibre_3.5.28.orig.tar.xz
6572c874c95fec141e3adaa118b6da24efb5e33d04f9d8e09515c08c0eb6abda 18356 djvulibre_3.5.28-2.2~deb11u1.debian.tar.xz
Files:
619403c4078f5b1b5d2781925c3a89ba 2407 libs optional djvulibre_3.5.28-2.2~deb11u1.dsc
2f72e25ecf571449aecc468fcfe4fb60 2959024 libs optional djvulibre_3.5.28.orig.tar.xz
d0ee9954c4846d8c1cbc959b9c6fd03c 18356 libs optional djvulibre_3.5.28-2.2~deb11u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=2uNQ
-----END PGP SIGNATURE-----
Attachment:
pgpFwHs4xoTNs.pgp
Description: PGP signature