Accepted jasper 1.900.1-13+deb7u2 (source amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 20 Dec 2014 08:42:19 +0100
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: source amd64
Version: 1.900.1-13+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Roland Stigge <stigge@antcom.de>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
libjasper-dev - Development files for the JasPer JPEG-2000 library
libjasper-runtime - Programs for manipulating JPEG-2000 files
libjasper1 - JasPer JPEG-2000 runtime library
Closes: 773463
Changes:
jasper (1.900.1-13+deb7u2) wheezy-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Add 05-CVE-2014-8137.patch patch.
CVE-2014-8137: double-free in in jas_iccattrval_destroy(). (Closes: #773463)
* Add 06-CVE-2014-8138.patch patch.
CVE-2014-8138: heap overflow in jp2_decode(). (Closes: #773463)
Checksums-Sha1:
e0d6c3f0740526df97a7ea4ca6a9195fe1408c76 1878 jasper_1.900.1-13+deb7u2.dsc
9b5c7e6851f5ec373f4808d27179f5112d551f64 32631 jasper_1.900.1-13+deb7u2.debian.tar.gz
adc9a16d831f4a37671bd93ea660a979a18dc99c 159520 libjasper1_1.900.1-13+deb7u2_amd64.deb
f82d4fd1dde08b696590cbf6ee445f1a565e3d05 568648 libjasper-dev_1.900.1-13+deb7u2_amd64.deb
7e4c80527f54ea747e817801680a08e7abd89f17 27148 libjasper-runtime_1.900.1-13+deb7u2_amd64.deb
Checksums-Sha256:
bea600e984dc62340e34ce4a39168e13aeceae2ce250c88eaee7879ef4611bfd 1878 jasper_1.900.1-13+deb7u2.dsc
fe16d00f46d0f3ac23898013b5abae626ca07c315fa7576c4a63b09839a4ee5e 32631 jasper_1.900.1-13+deb7u2.debian.tar.gz
732d52bfed5de9d6c4659f881582a29a9a5fbde057df37541bd4f3e04ef407ec 159520 libjasper1_1.900.1-13+deb7u2_amd64.deb
2dbe19f48d70dbf7315f7bc090e43e4391114ecba9b829d07264b19953d95a34 568648 libjasper-dev_1.900.1-13+deb7u2_amd64.deb
391d3a5fdfc8c4d0ff70399937f4521a43c324b5d7b6cd2ea67aa1ee83bfd075 27148 libjasper-runtime_1.900.1-13+deb7u2_amd64.deb
Files:
bb1aa608e174d34ed78586ab3d3461cf 1878 graphics optional jasper_1.900.1-13+deb7u2.dsc
04dc723f1ace68e0fa321efdfe36f78c 32631 graphics optional jasper_1.900.1-13+deb7u2.debian.tar.gz
f1b34073c5bc06db734c957ebc14e46b 159520 libs optional libjasper1_1.900.1-13+deb7u2_amd64.deb
7dbaf9791f89f1b9a6a8f67df093c3b2 568648 libdevel optional libjasper-dev_1.900.1-13+deb7u2_amd64.deb
6d94d7b23c5544138536bd95ad4a30dd 27148 graphics optional libjasper-runtime_1.900.1-13+deb7u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJUlSn2AAoJEAVMuPMTQ89EOoEQAIdZGX1dqaErd8sPifZRJNgE
2DSfS2Lm76LLpEBt4fhRQA0+UuH+Q2zWrx5ZR0kUlAaTWcHIqouGi7XY6B4DGMTT
cSYq8iRh+AlmmRYvUxQiQQL8rUiySUkQ7jlHYvTdJOGPXn761/MN9JqwKzaKSGNX
7Ncl+se/qRWCIhh1y3h/m1I6N3o512ahYtDz/9Hq7jOxs6bKS3TY+jGWQ9699QeJ
wOuyv2ywX7pikQ2jjxqLaYG9zizgRznuukv35isXXiQW7gnAA5uxsNrQk3TNnCrl
f7HistAxfwiM47+Hl7ZX2XUk4vJ/EzqoLY/Fj9p0W39DKW81qhzSBkRyBVlrOVtL
ybm2kV4h6USlHULRKfFXEEe3pB4wjis2dsb2wWeqMX9dFlQZH+ctkDjOUBeQjjyn
ZJntE5tHReGiO4Q8vpWatQOWpvUMOTNKEpiR++z7tGa53QxVZAuyH9OQ9X7dAvTi
4qxM8IFp35R5J45+xEzsnRxelFXtRyeye9HNrcGN63oPkI1CWR985VY+f0s5u3cg
82vuP3/3Io73w4nGo7+QmlgWJvtqre8kyXt3dNaIigowjZJboRkNGpVEiDatbr60
6AxUYKpUAOxN3mBV1kv2fJhPLWlHlzn7n6cogOvZ40vPoeGjnjsNHe1B2rYFoYbH
xSNTYSwUkYc5goxqFyQq
=roul
-----END PGP SIGNATURE-----