Accepted jasper 1.900.1-debian1-2.4+deb8u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 06 Mar 2016 14:49:44 +0100
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: source
Version: 1.900.1-debian1-2.4+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Roland Stigge <stigge@antcom.de>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 812978 816625 816626
Description:
libjasper-dev - Development files for the JasPer JPEG-2000 library
libjasper-runtime - Programs for manipulating JPEG-2000 files
libjasper1 - JasPer JPEG-2000 runtime library
Changes:
jasper (1.900.1-debian1-2.4+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* CVE-2016-1577: Prevent double-free in jas_iccattrval_destroy()
(Closes: #816625)
* CVE-2016-2089: matrix rows_ NULL pointer dereference in jas_matrix_clip()
(Closes: #812978)
* CVE-2016-2116: Prevent jas_stream_t memory leak in
jas_iccprof_createfrombuf() (Closes: #816626)
Checksums-Sha1:
3e5ce30f9c10320f62b00fc6fe723d81afb883a8 1955 jasper_1.900.1-debian1-2.4+deb8u1.dsc
3b49b1c9ea30c969f608c52e62bf2b743a9769e1 1140771 jasper_1.900.1-debian1.orig.tar.gz
c600341ea2cb5be9ee8665bfaf7b3a9df2555f7f 30260 jasper_1.900.1-debian1-2.4+deb8u1.debian.tar.xz
Checksums-Sha256:
52e8e9c7164dad5d3e4f68ae14322b4602255eb7a02af347f97a9592d449c685 1955 jasper_1.900.1-debian1-2.4+deb8u1.dsc
7276e8407080d8263b39aeac8305032b0534c7df25bf02718b3944711e3c81d7 1140771 jasper_1.900.1-debian1.orig.tar.gz
995382b8f98a4226c0555a99a7fef938ef5ab04f646c400485cac07ddc53beb6 30260 jasper_1.900.1-debian1-2.4+deb8u1.debian.tar.xz
Files:
26447f2a9ef85e3892fade8d66f84ff8 1955 graphics optional jasper_1.900.1-debian1-2.4+deb8u1.dsc
d6aa5f1638d703cb03beb996b713ec6c 1140771 graphics optional jasper_1.900.1-debian1.orig.tar.gz
ca96ce1cb3b096cbf4dd69c101127b21 30260 graphics optional jasper_1.900.1-debian1-2.4+deb8u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=+NQV
-----END PGP SIGNATURE-----