Accepted optipng 0.6.4-1+deb7u3 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Nov 2017 17:09:33 +0100
Source: optipng
Binary: optipng
Architecture: source amd64
Version: 0.6.4-1+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Nelson A. de Oliveira <naoliv@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
optipng - advanced PNG (Portable Network Graphics) optimizer
Changes:
optipng (0.6.4-1+deb7u3) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2017-1000229:
An integer overflow vulnerability was found in optipng. This may lead to
arbitrary code exuction when a maliciously crafted TIFF file is processed.
Checksums-Sha1:
837216440a0ae16a020419f5dd2c591d53eca5aa 1918 optipng_0.6.4-1+deb7u3.dsc
1ad825cf65f01ab415328d5b78201ca7fef372cd 6019 optipng_0.6.4-1+deb7u3.debian.tar.bz2
3c7ec16bd72fd9e8a4ee3eacc14e8923d013dbf3 90720 optipng_0.6.4-1+deb7u3_amd64.deb
Checksums-Sha256:
1916e9b880ecee66173e99b26c69252740763e1389ef24b4d53d892ed67aba86 1918 optipng_0.6.4-1+deb7u3.dsc
e8c8cda5cf797fddff29d7d134a8d11e1982af36d2dba83ed06b3d432884666c 6019 optipng_0.6.4-1+deb7u3.debian.tar.bz2
89aab0ed571ab0c40da09843d50baff7be924daa2173f7d06ab4a248dc4123e6 90720 optipng_0.6.4-1+deb7u3_amd64.deb
Files:
fe6f93da91c668a9b79ccc3431e36788 1918 graphics optional optipng_0.6.4-1+deb7u3.dsc
734d6211e26b2a102172c40b058edda1 6019 graphics optional optipng_0.6.4-1+deb7u3.debian.tar.bz2
4641723510b857762e1c951393f4279c 90720 graphics optional optipng_0.6.4-1+deb7u3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Hbvk
-----END PGP SIGNATURE-----