Accepted xpdf 1.00-3.4 (mipsel all source)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.7 Date: Fri, 14 Jan 2005 14:26:31 +0100 Source: xpdf Binary: xpdf-common xpdf xpdf-reader xpdf-utils Architecture: source mipsel all Version: 1.00-3.4 Distribution: stable-security Urgency: high Maintainer: Hamish Moffatt <[EMAIL PROTECTED]> Changed-By: Martin Schulze <[EMAIL PROTECTED]> Description: xpdf - Portable Document Format (PDF) suite xpdf-common - Portable Document Format (PDF) suite -- common files xpdf-reader - Portable Document Format (PDF) suite -- viewer for X11 xpdf-utils - Portable Document Format (PDF) suite -- utilities Changes: xpdf (1.00-3.4) stable-security; urgency=high . * Non-maintainer upload by the Security Team * Fixed buffer overflow that could overwrite the stack and hence cause the execution of arbitrary code as reported by iDEFENSE [src/Decrypt.cc, CAN-2005-0064] Files: 635d7c4eae9655d8a3377d8eed6cb2d1 706 text optional xpdf_1.00-3.4.dsc 0267c0fd7ffecd48dd888e170953a480 10726 text optional xpdf_1.00-3.4.diff.gz 14b9041fb706c9dcf9a72a7a2d616498 1286 text optional xpdf_1.00-3.4_all.deb d163325cae5a83d1f9ef2022242c731d 38654 text optional xpdf-common_1.00-3.4_all.deb 3651e279ad35be576904a273ccc97e82 546180 text optional xpdf-reader_1.00-3.4_mipsel.deb d43a48dd2e29d83d6c8cd82c7b8eaede 998826 text optional xpdf-utils_1.00-3.4_mipsel.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFB6LsiW5ql+IAeqTIRAnu+AKC4QGTLPBcBARm5vfCFc60NkSzSyQCgh+7d TEdla5fdDv65uneW9Ay/XI4= =TOAA -END PGP SIGNATURE- Accepted: xpdf-common_1.00-3.4_all.deb to pool/main/x/xpdf/xpdf-common_1.00-3.4_all.deb xpdf-reader_1.00-3.4_mipsel.deb to pool/main/x/xpdf/xpdf-reader_1.00-3.4_mipsel.deb xpdf-utils_1.00-3.4_mipsel.deb to pool/main/x/xpdf/xpdf-utils_1.00-3.4_mipsel.deb xpdf_1.00-3.4.diff.gz to pool/main/x/xpdf/xpdf_1.00-3.4.diff.gz xpdf_1.00-3.4.dsc to pool/main/x/xpdf/xpdf_1.00-3.4.dsc xpdf_1.00-3.4_all.deb to pool/main/x/xpdf/xpdf_1.00-3.4_all.deb -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Accepted mysql 3.23.49-8.9 (mipsel all source)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.7 Date: Thu, 13 Jan 2005 02:50:21 +0100 Source: mysql Binary: mysql-common libmysqlclient10 mysql-server mysql-client libmysqlclient10-dev Architecture: source mipsel all Version: 3.23.49-8.9 Distribution: stable-security Urgency: high Maintainer: Christian Hammers <[EMAIL PROTECTED]> Changed-By: Christian Hammers <[EMAIL PROTECTED]> Description: libmysqlclient10 - mysql database client library libmysqlclient10-dev - mysql database development files mysql-client - mysql database client binaries mysql-common - mysql database common files (e.g. /etc/mysql/my.cnf) mysql-server - mysql database server binaries Changes: mysql (3.23.49-8.9) stable-security; urgency=high . * Maintainer upload for the Security Team * Javier Fernandez-Sanguino Pena from the Debian Security Audit Project found a /tmp symlink vulnerability in the mysqlaccess script that could allow an unprivileged user to let root overwrite arbitrary files without his knowledge and also could unveil the contents of a temporary file which might contain sensitive information. [scripts/mysqlaccess.sh, CAN-2005-0004] * Added older security patches to debian/patches for reference Files: 943c6c647b130518c2a6c96bcb9c4031 875 misc optional mysql_3.23.49-8.9.dsc 7c46ef730e9c81c554b6d511481c02b7 68320 misc optional mysql_3.23.49-8.9.diff.gz 9c6cf59a839d3fc25a74f164358008e2 17484 misc optional mysql-common_3.23.49-8.9_all.deb 73d7c69f49a13e8e3592310c2bc675e0 251192 libs optional libmysqlclient10_3.23.49-8.9_mipsel.deb f13325c3394b0385c76d289d886f165f 689122 devel optional libmysqlclient10-dev_3.23.49-8.9_mipsel.deb 6d0e79f252d1cd3048ce3367aa200636 134828 misc optional mysql-client_3.23.49-8.9_mipsel.deb 499551d692fc5d80fd16c43e83e19201 2839732 misc optional mysql-server_3.23.49-8.9_mipsel.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFB5obwW5ql+IAeqTIRAiyXAKCQC8aHPDzfJK9hlhWbXxQ3nHr32QCdGvDF t7hEp2z0+QL3AnU0va/g3y4= =hRnR -END PGP SIGNATURE- Accepted: libmysqlclient10-dev_3.23.49-8.9_mipsel.deb to pool/main/m/mysql/libmysqlclient10-dev_3.23.49-8.9_mipsel.deb libmysqlclient10_3.23.49-8.9_mipsel.deb to pool/main/m/mysql/libmysqlclient10_3.23.49-8.9_mipsel.deb mysql-client_3.23.49-8.9_mipsel.deb to pool/main/m/mysql/mysql-client_3.23.49-8.9_mipsel.deb mysql-common_3.23.49-8.9_all.deb to pool/main/m/mysql/mysql-common_3.23.49-8.9_all.deb mysql-server_3.23.49-8.9_mipsel.deb to pool/main/m/mysql/mysql-server_3.23.49-8.9_mipsel.deb mysql_3.23.49-8.9.diff.gz to pool/main/m/mysql/mysql_3.23.49-8.9.diff.gz mysql_3.23.49-8.9.dsc to pool/main/m/mysql/mysql_3.23.49-8.9.dsc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Accepted imagemagick 4:5.4.4.5-1woody5 (source mipsel)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.7 Date: Mon, 17 Jan 2005 19:32:26 +0100 Source: imagemagick Binary: libmagick++5 imagemagick libmagick5-dev libmagick5 perlmagick libmagick++5-dev Architecture: source mipsel Version: 4:5.4.4.5-1woody5 Distribution: stable-security Urgency: high Maintainer: Ryuichi Arafune <[EMAIL PROTECTED]> Changed-By: Martin Schulze <[EMAIL PROTECTED]> Description: imagemagick - Image manipulation programs. libmagick++5 - The object-oriented C++ API to the ImageMagick library libmagick++5-dev - The object-oriented C++ API to the ImageMagick library.--developm libmagick5 - Image manipulation library (free version). libmagick5-dev - Image manipulation library (free version) -- development perlmagick - A perl interface to the libMagick graphics routines. Changes: imagemagick (4:5.4.4.5-1woody5) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Hardcode the upper limit for channels to 24 to fix buffer overflow [coders/psd.c, CAN-2005-0005] Files: 7ca6886f64037e980060508a770bd777 852 graphics optional imagemagick_5.4.4.5-1woody5.dsc 4b8192231c8975e0f83bab0bdee0f25a 15619 graphics optional imagemagick_5.4.4.5-1woody5.diff.gz a4ecbf6a8abbd0e18e0b3c2d896e2dcc 1294920 graphics optional imagemagick_5.4.4.5-1woody5_mipsel.deb 084defe73c73603e61b69419e1374f8e 721098 libs optional libmagick5_5.4.4.5-1woody5_mipsel.deb 1e8aa5e91cf61883a0c046f2d734c12c 67414 devel optional libmagick5-dev_5.4.4.5-1woody5_mipsel.deb 5cfad22c7d0beec13255e148ca11783d 113950 libs optional libmagick++5_5.4.4.5-1woody5_mipsel.deb 599616ef7a5869f65f65d4e1a493160c 56390 devel optional libmagick++5-dev_5.4.4.5-1woody5_mipsel.deb 78c33b91bf9214e4caaa39eaf0679df7 102940 interpreters optional perlmagick_5.4.4.5-1woody5_mipsel.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFB7CD7W5ql+IAeqTIRAmZQAKCJ2UWsxazGKCpTBivsZi95eAM52ACgj7em T7kCzrPd3oOG488FrAS2RYY= =Vnbo -END PGP SIGNATURE- Accepted: imagemagick_5.4.4.5-1woody5.diff.gz to pool/main/i/imagemagick/imagemagick_5.4.4.5-1woody5.diff.gz imagemagick_5.4.4.5-1woody5.dsc to pool/main/i/imagemagick/imagemagick_5.4.4.5-1woody5.dsc imagemagick_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/imagemagick_5.4.4.5-1woody5_mipsel.deb libmagick++5-dev_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/libmagick++5-dev_5.4.4.5-1woody5_mipsel.deb libmagick++5_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/libmagick++5_5.4.4.5-1woody5_mipsel.deb libmagick5-dev_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/libmagick5-dev_5.4.4.5-1woody5_mipsel.deb libmagick5_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/libmagick5_5.4.4.5-1woody5_mipsel.deb perlmagick_5.4.4.5-1woody5_mipsel.deb to pool/main/i/imagemagick/perlmagick_5.4.4.5-1woody5_mipsel.deb -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Accepted cupsys 1.1.14-5woody12 (source mipsel)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.7 Date: Fri, 14 Jan 2005 14:26:19 +0100 Source: cupsys Binary: cupsys-bsd cupsys-client libcupsys2-dev cupsys libcupsys2 cupsys-pstoraster Architecture: source mipsel Version: 1.1.14-5woody12 Distribution: stable-security Urgency: high Maintainer: Jeff Licquia <[EMAIL PROTECTED]> Changed-By: Martin Schulze <[EMAIL PROTECTED]> Description: cupsys - Common UNIX Printing System(tm) - server cupsys-bsd - Common UNIX Printing System(tm) - BSD commands cupsys-client - Common UNIX Printing System(tm) - client programs (SysV) cupsys-pstoraster - Common UNIX Printing System(tm) - pstoraster libcupsys2 - Common UNIX Printing System(tm) - libs libcupsys2-dev - Common UNIX Printing System(tm) - development files Changes: cupsys (1.1.14-5woody12) stable-security; urgency=high . * Non-maintainer upload by the Security Team * Fixed buffer overflow that could overwrite the stack and hence cause the execution of arbitrary code as reported by iDEFENSE [pdftops/Decrypt.cxx, CAN-2005-0064] Files: dba687dbc0a6992b0a3cdd8da496abdf 712 net optional cupsys_1.1.14-5woody12.dsc 083cfc2f84280ebaee765ec1ba7a8f29 40770 net optional cupsys_1.1.14-5woody12.diff.gz bbfee7ac7b15145c6f89d4a25c1db340 1812724 net optional cupsys_1.1.14-5woody12_mipsel.deb 95b08b3d7979b620c77859d15550eaaa 81626 net optional cupsys-client_1.1.14-5woody12_mipsel.deb 45c5412dfdcdad3a59bbc0f2f45988a4 112790 libs optional libcupsys2_1.1.14-5woody12_mipsel.deb 16c064ce075bf6ce6201312a0843d008 151276 devel optional libcupsys2-dev_1.1.14-5woody12_mipsel.deb d2f7131ac7ea1d6ef729c112b54d5629 68130 net extra cupsys-bsd_1.1.14-5woody12_mipsel.deb 9332c2b46d7345b8b15403ca9b6dd028 2407218 net optional cupsys-pstoraster_1.1.14-5woody12_mipsel.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFB6LsfW5ql+IAeqTIRAs73AJ9IxmcljfIf9kgBn8qyjxygbvHNlgCeIVhR uHMPPy0oSLCB32ELUewHRvA= =xrpV -END PGP SIGNATURE- Accepted: cupsys-bsd_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/cupsys-bsd_1.1.14-5woody12_mipsel.deb cupsys-client_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/cupsys-client_1.1.14-5woody12_mipsel.deb cupsys-pstoraster_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/cupsys-pstoraster_1.1.14-5woody12_mipsel.deb cupsys_1.1.14-5woody12.diff.gz to pool/main/c/cupsys/cupsys_1.1.14-5woody12.diff.gz cupsys_1.1.14-5woody12.dsc to pool/main/c/cupsys/cupsys_1.1.14-5woody12.dsc cupsys_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/cupsys_1.1.14-5woody12_mipsel.deb libcupsys2-dev_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/libcupsys2-dev_1.1.14-5woody12_mipsel.deb libcupsys2_1.1.14-5woody12_mipsel.deb to pool/main/c/cupsys/libcupsys2_1.1.14-5woody12_mipsel.deb -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
