1. Forum
  2. Usenet
  3. LINUX.DEBIAN.CHANGES

  • Accepted leptonlib 1.76.0-1+deb10u1 (source) into oldstable-proposed-up

    From Debian FTP Masters@21:1/5 to All on Fri Dec 24 16:50:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sun, 18 Apr 2021 10:03:02 +0200
    Source: leptonlib
    Architecture: source
    Version: 1.76.0-1+deb10u1
    Distribution: buster
    Urgency: medium
    Maintainer: Jeff Breidenbach <jab@debian.org>
    Changed-By: Thorsten Alteholz <debian@alteholz.de>
    Closes: 985089
    Changes:
    leptonlib (1.76.0-1+deb10u1) buster; urgency=medium
    .
    * Non-maintainer upload by the LTS Team.
    (Closes: #985089)
    * CVE-2020-36277
    denial of service (application crash) via an incorrect left
    shift in pixConvert2To8 in pixconv.c
    * CVE-2020-36278
    heap-based buffer over-read in findNextBorderPixel in ccbord.c
    * CVE-2020-36279
    heap-based buffer over-read in rasteropGeneralLow, related to
    adaptmap_reg.c and adaptmap.c
    * CVE-2020-36280
    heap-based buffer over-read in pixReadFromTiffStream, related
    to tiffio.c.
    * CVE-2020-36281
    heap-based buffer over-read in pixFewColorsOctcubeQuantMixed
    in colorquant1.c
    Checksums-Sha1:
    68a6cdaf0732ea26073325487c1ee6aa9dc438d5 2135 leptonlib_1.76.0-1+deb10u1.dsc
    56f0f0f059f158dd92e9a46343dca7cfa5b0ad39 7932 leptonlib_1.76.0-1+deb10u1.debian.tar.xz
    4a689ae59295fc390e350e25f263770504366cad 7622 leptonlib_1.76.0-1+deb10u1_amd64.buildinfo
    Checksums-Sha256:
    6a5ecd2fd3e1d758b6e38d65a209a3db363d3309c39153485a37f6595037e60b 2135 leptonlib_1.76.0-1+deb10u1.dsc
    3dc370ff39359c9886c89f3f1059cf4d5627c6c42c4dba73aafca4dac98ae4fb 7932 leptonlib_1.76.0-1+deb10u1.debian.tar.xz
    2ad0339b2cd5f152c66a7bc2769ef44bc278ae4fa4e32d461217736c22338da8 7622 leptonlib_1.76.0-1+deb10u1_amd64.buildinfo
    Files:
    d69b0f77a60cd4a02e2673e771b8dba7 2135 graphics optional leptonlib_1.76.0-1+deb10u1.dsc
    e9e6ce12df71f5cf2c41b560a36ada7b 7932 graphics optional leptonlib_1.76.0-1+deb10u1.debian.tar.xz
    222751f864b207a7381141b79b5443c6 7622 graphics optional leptonlib_1.76.0-1+deb10u1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmGz7DpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRwOFEACrXMbOJlNO8dbul+r0MQ37OekGHnUl UmV2JkSvtEQ+ZFcqA6jDDAhwdM9JQO7BoSm2H/lLlFWdENLCcqSaEVLlqubjpgkI D/88XE1h1eT+rg4b1RI3nS7bzFFff3chfj76IukwWyjgZbI84tqg0RfK0qeUgr5/ DqUdZZQCiePGyKaSnMYHmqNn6+BwO4hCWX7DPMQWMlbnUytRSgYenGH+668xl6EY e7bDVRitOJsnzoVrgDHlEZ5yGhO+BTR4RFjyUzLCg5f8t3PuO1ZFD95h61uI+9kQ LDuAioN2AbEwYfkn7Szlcq2HhFxHSpxMcX365thdRt+xNWZNN9wYfSLriLOB+GTV tSpFMyGcva8k4NY4KLrhSH6Q7GkRbKx+snVO3/iGJnF2sOwjwIkJsMMuiWTVx3x8 t5uqVz/UGD6AJ9bjkRH6gPiLsO9f3UNia3X76j2OWSaQK8tPP5RvVdDrl6N7qFYS rMrP5clisYyHN/s+v4f7SryxGqV8fYJArf193ELK5yqTJup7EsmKWMft37jGmqxw dICt6eicyDuzwXAiwOn4dJ2BbeZ7wymPaDR8U3x5SnFtSVpQHLz8PcZYiQsLrPwk K+aUgLK+IfzbjFPNixSg3QCjZEW+eD5SRWxwbbR/0i2JDZfX30gDk96VhBdHVSGv vvUIBksHIUTKMQ==
    =AKZU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)