Accepted advancecomp 1.20-1+deb9u1 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 29 Dec 2021 19:27:47 +0200
Source: advancecomp
Binary: advancecomp
Architecture: source
Version: 1.20-1+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Piotr Ożarowski <piotr@debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
advancecomp - collection of recompression utilities
Changes:
advancecomp (1.20-1+deb9u1) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2018-1056: Out-of-bounds heap buffer read in advzip.
* CVE-2019-8379: NULL pointer dereference in be_uint32_read().
* CVE-2019-8383: Invalid memory access in adv_png_unfilter_8().
* CVE-2019-9210: Integer overflow in advpng with invalid PNG size.
Checksums-Sha1:
c7dd1da022c040d1f84f8f495ec4ab99f60dcdb5 1789 advancecomp_1.20-1+deb9u1.dsc
970141b4d1935a2821268ce59cca60d308f5eb09 1198459 advancecomp_1.20.orig.tar.gz
b03522bde7685851d7c6cba7c38d1377a27b58f1 5108 advancecomp_1.20-1+deb9u1.debian.tar.xz
Checksums-Sha256:
4733e09112a3c9a402163a9d9a8f5e83ba069d7d3c0bf4d5d305f93735562cff 1789 advancecomp_1.20-1+deb9u1.dsc
590a447cfc7ab3a37ec707e13967a0046a81a888c561ebaff5415b1e946da67b 1198459 advancecomp_1.20.orig.tar.gz
6bda90aeb5c1fb017098fbd5a1756e8dfe05fce7546a2c54b1d7ed8cb0994112 5108 advancecomp_1.20-1+deb9u1.debian.tar.xz
Files:
8b1a8e605dcc7a67729b6f54d061cbf9 1789 utils optional advancecomp_1.20-1+deb9u1.dsc
c53a2c3a806fab1d3a99a1f1be83f148 1198459 utils optional advancecomp_1.20.orig.tar.gz
d30af8828542e1a6a24578719f3610b7 5108 utils optional advancecomp_1.20-1+deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=HyeG
-----END PGP SIGNATURE-----