Accepted xcftools 1.0.7-6.1 (source) into unstable

Debian FTP Masters Thu, 25 Feb 2021 00:18:01 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 25 Feb 2021 08:32:07 +0100
Source: xcftools
Architecture: source
Version: 1.0.7-6.1
Distribution: unstable
Urgency: high
Maintainer: Jan Hauke Rahm <j...@debian.org>
Changed-By: Markus Koschany <a...@debian.org>
Closes: 945317
Changes:
 xcftools (1.0.7-6.1) unstable; urgency=high
 .
   * Non-maintainer upload by the LTS team.
   * Fix CVE-2019-5086 and CVE-2019-5087:
     An exploitable integer overflow vulnerability exists in the
     flattenIncrementally function in the xcf2png and xcf2pnm binaries of
     xcftools. An integer overflow can occur while walking through tiles that
     could be exploited to corrupt memory and execute arbitrary code. In order
     to trigger this vulnerability, a victim would need to open a specially
     crafted XCF file. (Closes: #945317)
Checksums-Sha1:
 5d4b7d90db048632eb1d1a735121a72f305ee667 2041 xcftools_1.0.7-6.1.dsc
 8b8ded7dbb51abcae3465b8fd38f5df17fd21646 9168 xcftools_1.0.7-6.1.debian.tar.xz
 08e4c6dddf7764407ecca2aec4f5b547bf422b6d 6282 
xcftools_1.0.7-6.1_amd64.buildinfo
Checksums-Sha256:
 ab92aafb0af366d70dfc141f76189df53cad24936500f6150cc1c07cd5ecffff 2041 
xcftools_1.0.7-6.1.dsc
 ec3c285c1900da6e464532c6345ad5a3d917b9e2aa1390a87d51a285ccc93637 9168 
xcftools_1.0.7-6.1.debian.tar.xz
 b4f22e7debf6d0851c72e4f48fbd490dc02359c0a17491577bb3823eb5910999 6282 
xcftools_1.0.7-6.1_amd64.buildinfo
Files:
 768bc90e3b3430f01908b2243d23b2b5 2041 graphics optional xcftools_1.0.7-6.1.dsc
 4bb163b21077dac8c0941c9edf0b1421 9168 graphics optional 
xcftools_1.0.7-6.1.debian.tar.xz
 6df217c0a1d45961fa623aef5ac43f0e 6282 graphics optional 
xcftools_1.0.7-6.1_amd64.buildinfo
Accepted xcftools 1.0.7-6.1 (source) into unstable

Reply via email to
