Accepted jasper 1.900.1-debian1-2.4+deb8u5 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 02 Jan 2019 22:59:23 +0100
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: source amd64
Version: 1.900.1-debian1-2.4+deb8u5
Distribution: jessie-security
Urgency: high
Maintainer: Roland Stigge <stigge@antcom.de>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libjasper-dev - Development files for the JasPer JPEG-2000 library
libjasper-runtime - Programs for manipulating JPEG-2000 files
libjasper1 - JasPer JPEG-2000 runtime library
Changes:
jasper (1.900.1-debian1-2.4+deb8u5) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2018-18873, CVE-2018-19139, CVE-2018-19539, CVE-2018-19540,
CVE-2018-19541, CVE-2018-19542, CVE-2018-20570, CVE-2018-20584 and
CVE-2018-20622.
* Multiple issues were found in the JasPer JPEG-2000 library that could lead
to a denial-of-service (application crash), memory leaks and potentially
the execution of arbitrary code if a malformed image file is processed.
Checksums-Sha1:
8c358e318ce7861a4c1edb702f5c910215926e8c 2120 jasper_1.900.1-debian1-2.4+deb8u5.dsc
0fdce78855994a340e9daf1ba52a40a46f8bbdc2 40220 jasper_1.900.1-debian1-2.4+deb8u5.debian.tar.xz
ecc642ab2115172b751be28af5e16329cf92e873 135374 libjasper1_1.900.1-debian1-2.4+deb8u5_amd64.deb
caffb0059b282eaee45fa9ebde273386ee53febc 525636 libjasper-dev_1.900.1-debian1-2.4+deb8u5_amd64.deb
aff483e29b546f95edfb5e20b83a8909e457c9fd 23776 libjasper-runtime_1.900.1-debian1-2.4+deb8u5_amd64.deb
Checksums-Sha256:
5977b748da5ced64de8abcf0b31efc015ed4fdb626266c98207873a634397ebc 2120 jasper_1.900.1-debian1-2.4+deb8u5.dsc
56f624ee083d13ae8a779266458023f82356a8cc114ce713d668755a3069438a 40220 jasper_1.900.1-debian1-2.4+deb8u5.debian.tar.xz
7a486c870df7fe0f7ced60399dd28cdaba749446fb2e0f895608f9360288efa3 135374 libjasper1_1.900.1-debian1-2.4+deb8u5_amd64.deb
07142f06bd6624232862b070aa7656efe56dabb060028a2999de9b65eb3e0d0f 525636 libjasper-dev_1.900.1-debian1-2.4+deb8u5_amd64.deb
11a2bc8015dbaa639815a10d8b201e2f179256ed6b9a9f400cd981bfed703f39 23776 libjasper-runtime_1.900.1-debian1-2.4+deb8u5_amd64.deb
Files:
f0d53c6641ec01c8b9dfb3ae605fce37 2120 graphics optional jasper_1.900.1-debian1-2.4+deb8u5.dsc
1d29e49e80a382b698cd04f7e6f7db58 40220 graphics optional jasper_1.900.1-debian1-2.4+deb8u5.debian.tar.xz
321e94ff89554353e91533cb2ac0f783 135374 libs optional libjasper1_1.900.1-debian1-2.4+deb8u5_amd64.deb
67fe2525521d7c94811f41d1fdc7e99c 525636 libdevel optional libjasper-dev_1.900.1-debian1-2.4+deb8u5_amd64.deb
d00dea3a5309d4aaed43bf956a2f3658 23776 graphics optional libjasper-runtime_1.900.1-debian1-2.4+deb8u5_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlwtNhxfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkRoAP/jz3raCvnt48ppN8em32Hog8Dao9XF4da1fN
3xgcpvfzxTScXiAWFJkNwF0YEA3b+pSazjUqd6XACgzr5fVIWqMBRt0plKKd5oHN
v9JgC79nEw6T3gJS2G+/kYxWOBrH3YaugRLgHr1D1teHoXazi3apIk2oB8K+v8ir
QwEh1JsJiCcg8Ku+qMSSgqKPbCvbQTszp+aloacc6NK9/gV8NUiArmQmSSCW1A45
qn5uGx2AIz9DMY3qpkdcg+KsYI0LUNKUeI2BK04zHiYE8vYCC8nosMbSW8RQRWmG
l1BWzb3S2KA4k0HCLPNNAdiesocxM4OZyO6XM4w+sVmmZbJ7QtzsDEulTzee50P/
dlDKmO09pcEn+BXAYtCaP50bKLevn8Ed/Vmi6FXhBo+70RyOMZbbfgRW+ZfxmG65
yDmYMBEiuoral3YRilvWi5Yf1YCfaI/8h6/EI0GrO5EC2p6EXvnm1C2+Z06FZ2WZ
mlWfYv+cHyackbHD6nVEQdWVFSm9glU2yeVstjXiIpPquvTBj8LnqApEyqUKdxp7
tp1LXs5DsHBuAHqloDmApYpdnCpO6w8jkbeVuDwDHUzmoyoQEMUBD/mIBe4o4daS
Hb3+pNOXPBVboLZe/l+f5iYz0Yymo94Tr8bScZF6kAnhepZVolJlsp0c2F1q+4BD
2W11GwQl
=sZEL
-----END PGP SIGNATURE-----