-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (quilt) Source: gdk-pixbuf Binary: libgdk-pixbuf2.0-0, libgdk-pixbuf2.0-0-dbg, libgdk-pixbuf2.0-common, libgdk-pixbuf2.0-dev, libgdk-pixbuf2.0-doc, libgdk-pixbuf2.0-0-udeb, gir1.2-gdkpixbuf-2.0 Architecture: any all Version: 2.31.1-2+deb8u3 Maintainer: Debian GNOME Maintainers <[email protected]> Uploaders: Andreas Henriksson <[email protected]>, Emilio Pozuelo Monfort <[email protected]>, Laurent Bigonville <[email protected]>, Michael Biebl <[email protected]> Homepage: http://www.gtk.org/ Standards-Version: 3.9.6 Vcs-Browser: http://svn.debian.org/viewvc/pkg-gnome/desktop/unstable/gdk-pixbuf/ Vcs-Svn: svn://anonscm.debian.org/pkg-gnome/desktop/unstable/gdk-pixbuf/ Testsuite: autopkgtest Build-Depends: cdbs (>= 0.4.93), debhelper (>= 9), dh-autoreconf, gtk-doc-tools (>= 1.20), gnome-pkg-tools (>= 0.10), libglib2.0-dev (>= 2.37.6), libx11-dev, libpng-dev | libpng12-dev, libjpeg-dev, libjasper-dev, libtiff-dev, gobject-introspection (>= 0.9.12-4~), libgirepository1.0-dev (>= 0.9.3), xsltproc, shared-mime-info (>= 1.2) Package-List: gir1.2-gdkpixbuf-2.0 deb introspection optional arch=any libgdk-pixbuf2.0-0 deb libs optional arch=any libgdk-pixbuf2.0-0-dbg deb debug extra arch=any libgdk-pixbuf2.0-0-udeb udeb debian-installer extra arch=any libgdk-pixbuf2.0-common deb libs optional arch=all libgdk-pixbuf2.0-dev deb libdevel optional arch=any libgdk-pixbuf2.0-doc deb doc optional arch=all Checksums-Sha1: c715e21cacb939d2015c26124640b0aad6ad1986 1340056 gdk-pixbuf_2.31.1.orig.tar.xz 46d7d779cee78dc8520301783ef6e3334ae3947c 15796 gdk-pixbuf_2.31.1-2+deb8u3.debian.tar.xz Checksums-Sha256: 25a75e3c61dac11e6ff6416ad846951ccafac6486b1c6a1bfb0b213b99db52cd 1340056 gdk-pixbuf_2.31.1.orig.tar.xz d84987c744d6cdc20f42739263ed6caa43698487de03fe0522004fe56c39d18e 15796 gdk-pixbuf_2.31.1-2+deb8u3.debian.tar.xz Files: 74cde211f5b7ac1015d1a7c9feee037c 1340056 gdk-pixbuf_2.31.1.orig.tar.xz dec526f29772c250de12c7eea7ce50c9 15796 gdk-pixbuf_2.31.1-2+deb8u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJWK5umAAoJEAVMuPMTQ89EyQQP/2iYUfxxiMj5aHskHwerbM7O hHOQt/JC1pYi/4OHMUM0/GU2vFYjGhEWdtn3mM20hZvWUuS3ZT1kDbPLehlW8jA4 8HeidnpjozFDebVTIP5i3td3BjcVaFfDVwJ0odiNQs/vjDfHHQf2hFnkkenVIcWI r0CxwFullcLqg8tdpRNq5UWfGuhTo0j+RhO3GnF8NcWm96Hi5w+MgXTliztoe9QK 2W/j2NTgsfd3DVjZ13241puoms2THJiUzJFepTuiYC7884JN1vdLt3J1tK9Az+t/ VaXm6KJL1KxmGawzFCERZYFHQjAirQd1al4509G/63oilTvKpGut7p45l7CYcWKq ZKHGFsElLyGAkcamPPV/41dYRPm2Jte0sVxoXxjStvssXKeGh8YjNParHZFUZZyh XWwRFP8Gp+WyIMrd99sAOeR+wgrX1/wKGE2Eol08K7eHsT+ti9E2tZC83qllfKmg M9ewp1OPIUQEir/GN07OB9XpXhUpK0eX9fb1IA/ELmO/1XYP+7yh6GpBctlG4jHQ KJ3fjoj+F+miJ33GBS0Ru3ULuXtzAcwYo4OUGh36UThveKHd8SWr4516qoGL954c U809hOn7Y3L8T9mRT6CIG7lQEWc7yfPCIo9ZbIRAM6VvCI7RpIe4szHx3ghR4QJf w0eKY2Umo3d1og5wFdF1 =xWkE -----END PGP SIGNATURE----- Changes: gdk-pixbuf (2.31.1-2+deb8u3) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add patches to fix CVE-2015-7673. CVE-2015-7673: Heap overflow and DoS vulnerability when scaling a TGA file. * Add patch to fix CVE-2015-7674. CVE-2015-7674: Heap overflow when scaling a GIF file. -- Salvatore Bonaccorso <[email protected]> Sat, 24 Oct 2015 16:43:46 +0200