-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Jun 2019 17:33:42 +0200 Source: libgd2 Binary: libgd-tools libgd-dev libgd3 Architecture: source amd64 Version: 2.2.4-2+deb9u5 Distribution: stretch Urgency: high Maintainer: GD team Changed-By: Jonas Meurer Description: libgd-dev - GD Graphics Library (development version) libgd-tools - GD command line tools and example code libgd3 - GD Graphics Library Closes: 929821 Changes: libgd2 (2.2.4-2+deb9u5) stretch; urgency=high . * Fix CVE-2019-11038: Uninitialized read in gdImageCreateFromXbm (Closes: #929821) Checksums-Sha1: 6b8ccb6d590657e4d0d284ee22a07902a86a0243 2191 libgd2_2.2.4-2+deb9u5.dsc 67779817d7aecb94594c43ace949af350ca1df7f 2478528 libgd2_2.2.4.orig.tar.xz a16faae5c2c057c295af3dbbf6655b02fa5c1d37 30684 libgd2_2.2.4-2+deb9u5.debian.tar.xz f43417f4d995c7cf418976812b8bda8d079a6dc5 271344 libgd-dev_2.2.4-2+deb9u5_amd64.deb be0703f552897c4ba06715a6f74d806d17da4b79 46288 libgd-tools-dbgsym_2.2.4-2+deb9u5_amd64.deb 551de75c937dcd955781fb114448af02f9fcf297 34830 libgd-tools_2.2.4-2+deb9u5_amd64.deb 6270f1fe71d0d743090325458e1c61f037092af8 8570 libgd2_2.2.4-2+deb9u5_amd64.buildinfo 997b418e7d93c32e35b31b87c86c5b31a83c03a1 245784 libgd3-dbgsym_2.2.4-2+deb9u5_amd64.deb a9e8cd42306e57660eae6e1b17e737bcb600120d 132168 libgd3_2.2.4-2+deb9u5_amd64.deb Checksums-Sha256: a239c011de077572244b500f98ceb44e50a876ca5ae2958ab29e118b4d10ce8e 2191 libgd2_2.2.4-2+deb9u5.dsc 137f13a7eb93ce72e32ccd7cebdab6874f8cf7ddf31d3a455a68e016ecd9e4e6 2478528 libgd2_2.2.4.orig.tar.xz 348e38aa9b1f74154cc88b207b3af5047e0744a9fe91f37ddbfc87abe8468bd9 30684 libgd2_2.2.4-2+deb9u5.debian.tar.xz d63583a7dae0dff24fb8e3d23263bfad762f36ac8480c7d8b953bc023882cdf7 271344 libgd-dev_2.2.4-2+deb9u5_amd64.deb 2f10856fd0263f57bab960787a5e2e168075b83bcff0ff8076c7b48fa0b676ee 46288 libgd-tools-dbgsym_2.2.4-2+deb9u5_amd64.deb b58a4fe57aaf6d27c010b442ffd697fde465c885ef71eb2f7a8c452a36b07e85 34830 libgd-tools_2.2.4-2+deb9u5_amd64.deb 3e56836559802b7813b54183306f50da0e73996d46b9bc6a2cf6d582b7cf5f8d 8570 libgd2_2.2.4-2+deb9u5_amd64.buildinfo 97e1029379c9c3d61fe0a2e72a25bae01224aaa5439f7a42895a151c0dc45070 245784 libgd3-dbgsym_2.2.4-2+deb9u5_amd64.deb 7f1edf9bc8819a962b7338aec0b68f933ec0c6c6a7179876550178ea7704a6bf 132168 libgd3_2.2.4-2+deb9u5_amd64.deb Files: 9747c706899f212c940bcc95b42540e1 2191 graphics optional libgd2_2.2.4-2+deb9u5.dsc a244855a323a3ea1975d708eb1e12b7a 2478528 graphics optional libgd2_2.2.4.orig.tar.xz f9fb36c41703a2919cc255370c2567e9 30684 graphics optional libgd2_2.2.4-2+deb9u5.debian.tar.xz d49d0f49fcc1ebcc3b658bfb17ef0147 271344 libdevel optional libgd-dev_2.2.4-2+deb9u5_amd64.deb dc7ef3e2ea7151385a700bc58cb52f67 46288 debug extra libgd-tools-dbgsym_2.2.4-2+deb9u5_amd64.deb 52b022701dadf58155f1649097739d7f 34830 graphics optional libgd-tools_2.2.4-2+deb9u5_amd64.deb 57dccb56b4f4a1ab569cb24ba756d6c3 8570 graphics optional libgd2_2.2.4-2+deb9u5_amd64.buildinfo 21e416b6eace5eda44bb6f336a2ff519 245784 debug extra libgd3-dbgsym_2.2.4-2+deb9u5_amd64.deb bec41babf796fbd03f43cdb68e59f66d 132168 libs optional libgd3_2.2.4-2+deb9u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELIzSg9Pv30M4kOeDUmLn/0kQSf4FAlz/y64ACgkQUmLn/0kQ Sf7CqQ//cNy54lrUIHJOONpL+9otnI56KfmN+KEWXKnV2HWriiQ5imKGpXC0AZIr 1Mo7TmtFQJi8vs2SYdFchKqcNgDIT0jKsy3gl6DrzjeyZ2PPDBCZu55SslHiXY+S BfwPssSbgy0P/+fmUwvJ/aP4szDmlrRgz6X5M0uI8zWwxjfIBdQVET+EXt75m9kY T7PKF8jn+AGOzEVqcLuxo97rO4XiiIbcns5INWyS8lWeYIBTqFl8h5Vl1/0/vnji hj3cu/pJgl53Ow0HgbMcoohdLKqVRsIFlHJKC3OLQ9GhAzdFDsFCgQ30ZD12RV6J k9sHO2+ngOU1vouMhDmfczQNFFimmCVn8VhiynsL6dPbhJaeCsgq5WgLBaJPGdx0 bGQ8QvZHngQc7rTvIYK9LiWKR1HCTe3xcKrtINuR9EVnW1IUVsk+HjF9Niq8GnJ1 X5382s9uV24ZIStjT/t11vRqP7A1iLQEtbOQ4s8YPtIVmGC471GE0OMk34oZPFRH H//WSxRes1Slf6cjCgqxYkLsMnJ7yqhv6N656w5N9eCYTXHLSgpxuOooW0MzQrqX w/OYQpf2z24dsEoJ3/4Ynlv/qGeTphKgJzbQjsE5Lc3/zvm6EPyHZ7khcljpcQnr 5c+DSn0URcHt6RYI1cWJINxSQbDNCNXeXVNB5irBygNusOHU7EQ= =ONUM -----END PGP SIGNATURE-----