Your message dated Sat, 05 Mar 2022 22:47:30 +0000
with message-id <[email protected]>
and subject line Bug#973770: fixed in cimg 2.4.5+dfsg-1+deb10u1
has caused the Debian Bug report #973770,
regarding cimg: CVE-2020-25693
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
973770: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973770
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: cimg
Version: 2.8.4+dfsg-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/dtschump/CImg/pull/295
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for cimg.
CVE-2020-25693[0]
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2020-25693
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25693
[1] https://github.com/dtschump/CImg/pull/295
[2] https://bugs.launchpad.net/ubuntu/+source/cimg/+bug/1900983
[3]
https://github.com/dtschump/CImg/commit/4f184f89f9ab6785a6c90fd238dbaa6d901d3505
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: cimg
Source-Version: 2.4.5+dfsg-1+deb10u1
Done: Adrian Bunk <[email protected]>
We believe that the bug you reported is fixed in the latest version of
cimg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Adrian Bunk <[email protected]> (supplier of updated cimg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Jan 2022 16:24:14 +0200
Source: cimg
Architecture: source
Version: 2.4.5+dfsg-1+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian Science Team
<[email protected]>
Changed-By: Adrian Bunk <[email protected]>
Closes: 973770
Changes:
cimg (2.4.5+dfsg-1+deb10u1) buster; urgency=medium
.
* Non-maintainer upload.
* CVE-2020-25693: Fix multiple heap buffer overflows.
(Closes: #973770)
Checksums-Sha1:
936ec7c7e4122b55a7f4cd32d80a3876c13bcb65 2336 cimg_2.4.5+dfsg-1+deb10u1.dsc
66b0504b7c31a3ed1f463c816e4c0d84f38b9d4c 18608
cimg_2.4.5+dfsg-1+deb10u1.debian.tar.xz
Checksums-Sha256:
577d6801e4f40f62f380abadcb112b771bfa2652f30e26b8eaea3ec28a372e45 2336
cimg_2.4.5+dfsg-1+deb10u1.dsc
4df4ce57b379b110295b52a93da92d3437650dbac2174f2502b7991a10dc2cdf 18608
cimg_2.4.5+dfsg-1+deb10u1.debian.tar.xz
Files:
9bf22099672349d0bdfe992b471f1f0c 2336 math optional
cimg_2.4.5+dfsg-1+deb10u1.dsc
1641e5343522f7b1781277f0450d66a1 18608 math optional
cimg_2.4.5+dfsg-1+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=IAX0
-----END PGP SIGNATURE-----
--- End Message ---
--
debian-science-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers
