Format: 1.8 Date: Wed, 20 Nov 2019 10:29:06 -0500 Source: djvulibre Binary: libdjvulibre-dev libdjvulibre21 libdjvulibre-text djvulibre-dbg djvulibre-desktop djview djview3 djvuserve djvulibre-bin Architecture: amd64 all Version: 3.5.27.1-5ubuntu0.1 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: djview - Transition package, djview3 to djview4 djview3 - Transition package, djview3 to djview4 djvulibre-bin - Utilities for the DjVu image format djvulibre-dbg - Debug symbols for the DjVu image format djvulibre-desktop - Desktop support for the DjVu image format djvuserve - CGI program for unbundling DjVu files on the fly libdjvulibre-dev - Development files for the DjVu image format libdjvulibre-text - Linguistic support files for libdjvulibre libdjvulibre21 - Runtime support for the DjVu image format Changes: djvulibre (3.5.27.1-5ubuntu0.1) xenial-security; urgency=medium . * SECURITY UPDATE: heap-based buffer overread - debian/patches/CVE-2019-15142-pre1.patch: fix lengths in libdjvu/DjVmDir.cpp, libdjvu/miniexp.cpp, tools/csepdjvu.cpp. - debian/patches/CVE-2019-15142.patch: add checks to libdjvu/DjVmDir.cpp. - CVE-2019-15142 * SECURITY UPDATE: infinite loop in bitmap reader - debian/patches/CVE-2019-15143.patch: check return code in libdjvu/GBitmap.cpp, libdjvu/DjVmDir.cpp. - CVE-2019-15143 * SECURITY UPDATE: uncontrolled recursion in sorting - debian/patches/CVE-2019-15144.patch: fix logic in libdjvu/GContainer.h. - CVE-2019-15144 * SECURITY UPDATE: out of bounds read - debian/patches/CVE-2019-15145.patch: check bytes in libdjvu/GBitmap.h. - CVE-2019-15145 * SECURITY UPDATE: NULL pointer dereference in DJVU::filter_fv - debian/patches/CVE-2019-18804.patch: add extra checks to libdjvu/IW44EncodeCodec.cpp, tools/ddjvu.cpp. - CVE-2019-18804 Checksums-Sha1: ba037a7f8febc76a4b5f7aa3e9ef123dc97b6852 834 djview-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb dd8579079dafaa2c71a8eec2302752fd0ac276d6 836 djview3-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 757d7720c44f8509dca8b8c39661df47da2cf0de 5438 djview3_3.5.27.1-5ubuntu0.1_amd64.deb ae7140914cb77a9c3169bf1088eea7fc1d015538 5442 djview_3.5.27.1-5ubuntu0.1_amd64.deb f465ff3ec08bb45b7827b40c871a2ef272a001f8 850 djvulibre-bin-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb bcbaaa5ef64d6667f361d5ed4fb735ab43fda783 277758 djvulibre-bin_3.5.27.1-5ubuntu0.1_amd64.deb e440bc190b10120ead2c573e971566b9a766d9b5 4178162 djvulibre-dbg_3.5.27.1-5ubuntu0.1_amd64.deb 7cbe08de85e889197560aa9d8b2704c9ac552f37 79742 djvulibre-desktop_3.5.27.1-5ubuntu0.1_all.deb 31162d505655f148c9e390ea3997850ffac4f7df 914 djvuserve-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 6d4f3140edd3e81a93a444ed2fd79d165ad41485 21132 djvuserve_3.5.27.1-5ubuntu0.1_amd64.deb da2bf73cb518daa6d34ce1d3b9ba48d88ab5ae03 1150 libdjvulibre-dev-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 6a90b0db1f9d99e381c96108217a9eb000dab698 2386646 libdjvulibre-dev_3.5.27.1-5ubuntu0.1_amd64.deb c87d4ba6afe333744c8e937039e702d0d3623426 49412 libdjvulibre-text_3.5.27.1-5ubuntu0.1_all.deb 3266ad3af96d0fb8b4486b9978f412982431f0ba 824 libdjvulibre21-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 1f91412cb6fe0e605b1f4703d964dffdeef06632 581566 libdjvulibre21_3.5.27.1-5ubuntu0.1_amd64.deb Checksums-Sha256: 9f601452ed66927a5d654227124ff4c0df0c4bbf8876da6f4aaebb36bbdd17c0 834 djview-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 79b5ca915f707a7147f319e77ad7657f8a0186e3e4a108ac0c63b5a77a7e5677 836 djview3-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb ef2e3ed111fa4f7df59a7edfcd4dd0d2eda4236be1401ea62b5196f067ada06f 5438 djview3_3.5.27.1-5ubuntu0.1_amd64.deb 85dcc354b8810db6016e0cec684db5c6fa1ecfba4fe1949fecec0fe1791cf30c 5442 djview_3.5.27.1-5ubuntu0.1_amd64.deb 48e561e3525452b482c5a70c8c5b0a231240dceeceb9af51b56561aaaeed8be4 850 djvulibre-bin-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb e7f5125638324713809d0b7c519c36155290118ab9e4604179e185e2098c2474 277758 djvulibre-bin_3.5.27.1-5ubuntu0.1_amd64.deb 000aff956267e9eca0e88f1a23bc7d43748b1e2ba9ccfee0f79df96bb69ae9b1 4178162 djvulibre-dbg_3.5.27.1-5ubuntu0.1_amd64.deb 209d0f5ef22c535cadac3a020513e21af715363d3fb1918246bd7151634aa7ff 79742 djvulibre-desktop_3.5.27.1-5ubuntu0.1_all.deb bf4d04f1250f168b4b0ce7abfb6c22dd4016861f4d8ddf14e47ceb6f41900e7f 914 djvuserve-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb c7e2f78c0d28c884a6861cc5e64ba2e67a6d0a4e27758b0bb897be1cf954842e 21132 djvuserve_3.5.27.1-5ubuntu0.1_amd64.deb 682f55f85f4337a12c46ed664d4d1521294bf32af5f00c5f6a2d014fe27e32b0 1150 libdjvulibre-dev-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 19920d83073374ffde863835a525080d3cea47be29727935f241ca6603c07488 2386646 libdjvulibre-dev_3.5.27.1-5ubuntu0.1_amd64.deb 918440e232fd4b774972a6347a301c9df96debed1fd371edebae6d587c39707f 49412 libdjvulibre-text_3.5.27.1-5ubuntu0.1_all.deb c082b581d0c6b14006a6dce1196fe3dd6faa902227ef9dd8a364dc0d1dcba9fd 824 libdjvulibre21-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb ef5f945af211c2db2b2c7221a354824b8ddb1efb119d08e67d01eaf17e60eb9d 581566 libdjvulibre21_3.5.27.1-5ubuntu0.1_amd64.deb Files: 03a164aff10f41685941cb2b8ff13601 834 graphics extra djview-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb d24fb7e16663df478356c5aed3e3cd07 836 graphics extra djview3-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb c8d9cf58bbaaeebd99b8314fc43a04b4 5438 graphics optional djview3_3.5.27.1-5ubuntu0.1_amd64.deb a5b86fef59ca4771303d2b726307f63d 5442 graphics optional djview_3.5.27.1-5ubuntu0.1_amd64.deb 8f6eeffaa43b90c32becc61eb7de12ed 850 graphics extra djvulibre-bin-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 7c8b615e368462e03d324ed6b57027f7 277758 graphics optional djvulibre-bin_3.5.27.1-5ubuntu0.1_amd64.deb 5b93f996d346377e706b40f6672ffdd4 4178162 debug extra djvulibre-dbg_3.5.27.1-5ubuntu0.1_amd64.deb 946c71a042cf5a7c4a9bc68d5bd28663 79742 libs optional djvulibre-desktop_3.5.27.1-5ubuntu0.1_all.deb dd6e4e04124400029a5bb0cbd9b85e9b 914 web extra djvuserve-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 550fbf4d38d5339bffdbd75caa3419f3 21132 web optional djvuserve_3.5.27.1-5ubuntu0.1_amd64.deb 4cc0723db2c1a253d878dc4c29aab5b7 1150 libdevel extra libdjvulibre-dev-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 16fef76dcb868c6e5d002ab5325a403a 2386646 libdevel optional libdjvulibre-dev_3.5.27.1-5ubuntu0.1_amd64.deb b8b9f40330082447c46f84fe65a4f70d 49412 libs optional libdjvulibre-text_3.5.27.1-5ubuntu0.1_all.deb 82f7d9d9dea46dc69ae7246fca84e94d 824 libs extra libdjvulibre21-dbgsym_3.5.27.1-5ubuntu0.1_amd64.ddeb 5da19ffce11e1797daa28db427a730f0 581566 libs optional libdjvulibre21_3.5.27.1-5ubuntu0.1_amd64.deb Original-Maintainer: Barak A. Pearlmutter