Accepted libgd2 2.2.5-1 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Aug 2017 14:21:43 +0200
Source: libgd2
Binary: libgd-tools libgd-dev libgd3
Architecture: source amd64
Version: 2.2.5-1
Distribution: unstable
Urgency: high
Maintainer: Ondřej Surý <ondrej@debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
libgd-dev - GD Graphics Library (development version)
libgd-tools - GD command line tools and example code
libgd3 - GD Graphics Library
Changes:
libgd2 (2.2.5-1) unstable; urgency=high
.
* New upstream version 2.2.5
+ [CVE-2017-6362]: Double-free in gdImagePngPtr().
+ [CVE-2017-7890]: Buffer over-read into uninitialized memory.
* Update d/watch for the github releases
* Refresh patches for the 2.2.5 release
Checksums-Sha1:
0de4692f8c342fcf71aafefb632349d9b0f97b15 2293 libgd2_2.2.5-1.dsc
281af8e7e9c798d368caf8758b983c4d8c24d9ec 3326856 libgd2_2.2.5.orig.tar.gz
cabdf1b07190505392cda696f03f85a0860e48fe 24224 libgd2_2.2.5-1.debian.tar.xz
26601fe9486dc409a9e4ef73c13d0dba68f0a7ca 274604 libgd-dev_2.2.5-1_amd64.deb
0e3d03c614c0be0d0936d6b4474da181445dcc5c 45682 libgd-tools-dbgsym_2.2.5-1_amd64.deb
45c34a3c8c3e5663927641a9a341612dcc3c4925 36420 libgd-tools_2.2.5-1_amd64.deb
750e2834e9f7bca60a699ff4ba3cc534bffcd682 8000 libgd2_2.2.5-1_amd64.buildinfo
bdcb2707001ed3dbec4412bc2e69de6733cb1271 249438 libgd3-dbgsym_2.2.5-1_amd64.deb
b3649c75d005f8c3d5b0656b60ac9e6fa8a8a749 136866 libgd3_2.2.5-1_amd64.deb
Checksums-Sha256:
78f922a04dc83615ce07922218da1c3bb9175569b9dbe6f6c6e5e637d283da18 2293 libgd2_2.2.5-1.dsc
150e6952af874bbccb33cf0f87288b41a8fd54f0ce4cff914ef90a80ef9d0162 3326856 libgd2_2.2.5.orig.tar.gz
963f4654a3633e6593b16c050c03742d80e515fc7a3b01d17539764c7fe898bc 24224 libgd2_2.2.5-1.debian.tar.xz
22414d8d9fac4b86858b0b43acf28a7ad5a67936129db28c39182d23aad596ef 274604 libgd-dev_2.2.5-1_amd64.deb
deed02aa1b757991ca071928ba709948568d748262da88030f3df65d21dd4654 45682 libgd-tools-dbgsym_2.2.5-1_amd64.deb
6bf5b93e0d88ce9e332fa2e8be5a8d9daae70e98834b44d44daff4c77876c2e3 36420 libgd-tools_2.2.5-1_amd64.deb
a324cb969a0c523b82a1bcb3b13c16f4a625f5354b8e49bbf4fc8ec5c5cd5dc8 8000 libgd2_2.2.5-1_amd64.buildinfo
2647933f24c78678c3d7fa14a3de3500c445cc8b330d0247a9b5f3f8114ec686 249438 libgd3-dbgsym_2.2.5-1_amd64.deb
e54f492ef1822be1b4202c08d82426ec9c5584a2fde4303318f90d32d4c2ad45 136866 libgd3_2.2.5-1_amd64.deb
Files:
9f82c49fbb6f820ad64ec2802e56a935 2293 graphics optional libgd2_2.2.5-1.dsc
d851cf184ccb9272b728ccb938c25b25 3326856 graphics optional libgd2_2.2.5.orig.tar.gz
9fc83f818bc85323ceec4e3ca7458ccb 24224 graphics optional libgd2_2.2.5-1.debian.tar.xz
aeb38af1eeb0dd8a90fb0e565865c235 274604 libdevel optional libgd-dev_2.2.5-1_amd64.deb
ae27a69165f2f9e3136aeceea2722787 45682 debug extra libgd-tools-dbgsym_2.2.5-1_amd64.deb
3ca1f4b0263bfc6ef378d9f2970d9b82 36420 graphics optional libgd-tools_2.2.5-1_amd64.deb
697d5f9c7350804132f1f7b5448e6fa1 8000 graphics optional libgd2_2.2.5-1_amd64.buildinfo
e624ca59e19dab153a2fa070571fc6a5 249438 debug extra libgd3-dbgsym_2.2.5-1_amd64.deb
96d5d9e110f12b08be620e0021f016b5 136866 libs optional libgd3_2.2.5-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAlmmr/RfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw
QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8
uwdQFxAApwVLgAcjk/V5tMgmXysFIeNXjSF8kGUgrZ3ZfYHdYAOEl0NQjYunoBmT
fhKPvp4d3ase24kxGb9dSjVDu9cu0ufVwf7ikOddjhx1GxiRcWaJAn1fsBRi1cKB
UYj+errPRSgKlJJARiTyPUi4EjgTgeM03Acxi1bzh29o9uLDBfngbEFS1zZtmAds
YNhBl6B1m4QVB9+nhwgkpLgKuLImF0aDgYOfZoTkVjC3TjQ+m/FoA7yDh6m+UM7+
OjqNVMwL88Iqwyeij7BgWJkpoQevoIITfKFs10xrmoamGy/9kdUO1Xz6MLzluryW
5IRUoenRSKNK9H5GXS6plO7AeXSholi/o0oen5Glb4xY3rsnlEj/3P0Ik4epOU3d
Bz3WD3x0TUWiW6Ydo7GzJvJ4Yvd2LYwsaGAhqCFPXQX7KEiWnspF1GZV3g7x6Eow
t39rJPXdWw4Tpv9zeLrrGHZjfTxWgSZqLar2BbwIrCoFm7uJ6BHXJ6teErvl9oGI
PmEiQcqz/43ag7JUXdgcHfFY34y1Jgorb+ZJuF+URBvAl4D2NCNdtlxPmNrRzXhB
el8MGtMKrY3DRfSDhjOYFqkFpZ5cdzp7hmKZeTpsvP5vMFQnVNbmyWNs4wxZIi4m
9x49TLhAJMAPs3zHvClJ8qLfEHiO5VEqU20hVbKG4lR7xwoG9a4=
=0/ey
-----END PGP SIGNATURE-----