Accepted libjpeg-turbo 1:1.3.1-12+deb8u1 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 22 Jan 2019 20:46:50 +0100
Source: libjpeg-turbo
Binary: libjpeg-dev libjpeg62-turbo-dev libjpeg62-turbo libjpeg62-turbo-dbg libturbojpeg1 libturbojpeg1-dbg libturbojpeg1-dev libjpeg-turbo-progs libjpeg-turbo-progs-dbg
Architecture: source all amd64
Version: 1:1.3.1-12+deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: Ondřej Surý <ondrej@debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Description:
libjpeg-dev - Development files for the JPEG library [dummy package]
libjpeg-turbo-progs - Programs for manipulating JPEG files
libjpeg-turbo-progs-dbg - Programs for manipulating JPEG files (debugging symbols)
libjpeg62-turbo - libjpeg-turbo JPEG runtime library
libjpeg62-turbo-dbg - Debugging symbols for the libjpeg-turbo JPEG library
libjpeg62-turbo-dev - Development files for the libjpeg-turbo JPEG library
libturbojpeg1 - TurboJPEG runtime library - SIMD optimized
libturbojpeg1-dbg - TurboJPEG runtime library - SIMD optimized (debugging symbols)
libturbojpeg1-dev - Development files for the TurboJPEG library
Changes:
libjpeg-turbo (1:1.3.1-12+deb8u1) jessie-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2018-11212: Check image size when reading targa file. Throw an
error when image width or height is 0.
* CVE-2018-11213, CVE-2018-11214: Check range of integer values in PPM
text file. Add checks to ensure values are within the specified range.
(This in theory also fixes unimportant-to-Debian issue CVE-2016-3616).
* CVE-2018-1152: tjLoadImage(): Fix FPE triggered by malformed BMP.
Checksums-Sha1:
0c3f15a72d8bab3ba61209559a97eeb082385dd7 2591 libjpeg-turbo_1.3.1-12+deb8u1.dsc
5fa19252e5ca992cfa40446a0210ceff55fbe468 1390282 libjpeg-turbo_1.3.1.orig.tar.gz
929a62fc58ada8ab6f6399d16f4c142637b3f133 81232 libjpeg-turbo_1.3.1-12+deb8u1.debian.tar.xz
3abc2e216fb8578e86c35bd56ed1bc807106e7e8 49546 libjpeg-dev_1.3.1-12+deb8u1_all.deb
21336b77bc74f3fe9527c84657573c2a6e1b3d3b 456972 libjpeg62-turbo-dev_1.3.1-12+deb8u1_amd64.deb
95ff1fe13e325b408de03a766b0049b751a7f6f0 116686 libjpeg62-turbo_1.3.1-12+deb8u1_amd64.deb
7ab160eb962654df2b6aa5f5d1bd52e5e307ffab 318686 libjpeg62-turbo-dbg_1.3.1-12+deb8u1_amd64.deb
2415e219e8e2ffc8f8916abd16294585a0746e3a 126982 libturbojpeg1_1.3.1-12+deb8u1_amd64.deb
7b1bacd158e9bdc564550a9c7dd4a45aa3c7a63b 355334 libturbojpeg1-dbg_1.3.1-12+deb8u1_amd64.deb
d26bc7a7f546ae8248b328b6f79aaa2e0f730301 498016 libturbojpeg1-dev_1.3.1-12+deb8u1_amd64.deb
c696a1f7b2864f9f38dcb39c571912ed30cfd3ee 83232 libjpeg-turbo-progs_1.3.1-12+deb8u1_amd64.deb
6e646b26eae093dcfe654c762d531e7ede67ccd1 187578 libjpeg-turbo-progs-dbg_1.3.1-12+deb8u1_amd64.deb
Checksums-Sha256:
1e25b1182557628cc43e271a9703ac91f8029062ef848c58f57a17d20929b336 2591 libjpeg-turbo_1.3.1-12+deb8u1.dsc
c132907417ddc40ed552fe53d6b91d5fecbb14a356a60ddc7ea50d6be9666fb9 1390282 libjpeg-turbo_1.3.1.orig.tar.gz
80db43c97a0c7c7f42794773261061bec5989edce52326ccd235b101edbb825e 81232 libjpeg-turbo_1.3.1-12+deb8u1.debian.tar.xz
ad5144db360e9fb84eba426b0ec7841a41c2b584abf97048d45e09dddb7c1873 49546 libjpeg-dev_1.3.1-12+deb8u1_all.deb
7ec7f926e3ac443373c90805cec6ed1afb0c0d4bcc950e5e594da08cade27441 456972 libjpeg62-turbo-dev_1.3.1-12+deb8u1_amd64.deb
717cf834afa6e71b70041b301656158ad541995e32d71158ef355ce54b276c3c 116686 libjpeg62-turbo_1.3.1-12+deb8u1_amd64.deb
b9838169c5abf690151ac5d57507280395ddeaa956f00a1e79db174b854dcb60 318686 libjpeg62-turbo-dbg_1.3.1-12+deb8u1_amd64.deb
c4f2184f28563792da03677745d57510eed0d88118fe849bbeb31c83e07aff17 126982 libturbojpeg1_1.3.1-12+deb8u1_amd64.deb
a7db947d9b39e212d9694c5b02f0a5790ab8dd50ea96b335d807960a83586e3a 355334 libturbojpeg1-dbg_1.3.1-12+deb8u1_amd64.deb
374ad1a88df74f9eaabea4efe9d518fa5bb2c65fdacf2566540e99fa69f6d126 498016 libturbojpeg1-dev_1.3.1-12+deb8u1_amd64.deb
8fd805b373e9c80a5fba61f7e57d70d94919a73779a363790903573e51566191 83232 libjpeg-turbo-progs_1.3.1-12+deb8u1_amd64.deb
17d3246b30d49b29ce47597c47c83c155cb80aa769943f90d5b1e21f38eb4305 187578 libjpeg-turbo-progs-dbg_1.3.1-12+deb8u1_amd64.deb
Files:
378ec007f9461933723d6301f1841201 2591 graphics optional libjpeg-turbo_1.3.1-12+deb8u1.dsc
2c3a68129dac443a72815ff5bb374b05 1390282 graphics optional libjpeg-turbo_1.3.1.orig.tar.gz
7c680599ee7e96fd2641c6f8adb61558 81232 graphics optional libjpeg-turbo_1.3.1-12+deb8u1.debian.tar.xz
d2ab54e1d253b1def0f2c34fa36dc288 49546 libdevel optional libjpeg-dev_1.3.1-12+deb8u1_all.deb
78337e6ac166e0cd20672913f2de6320 456972 libdevel optional libjpeg62-turbo-dev_1.3.1-12+deb8u1_amd64.deb
a464cd08f50ad1c2055a14b068b3184c 116686 libs optional libjpeg62-turbo_1.3.1-12+deb8u1_amd64.deb
63184328927234b8969985eb3e88263a 318686 debug extra libjpeg62-turbo-dbg_1.3.1-12+deb8u1_amd64.deb
096863f3db60dc789df3fd041665e8c9 126982 libs optional libturbojpeg1_1.3.1-12+deb8u1_amd64.deb
66f55f6b8cd865def473cc482098a012 355334 debug extra libturbojpeg1-dbg_1.3.1-12+deb8u1_amd64.deb
0bd8b41d6bbfb733d52f77cfbb48385e 498016 libdevel optional libturbojpeg1-dev_1.3.1-12+deb8u1_amd64.deb
0a369f314dfd2261fd46c79a43eb2174 83232 graphics optional libjpeg-turbo-progs_1.3.1-12+deb8u1_amd64.deb
8c596c1601d962490d9580fc2351b321 187578 debug extra libjpeg-turbo-progs-dbg_1.3.1-12+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Qifa
-----END PGP SIGNATURE-----