Format: 1.8 Date: Fri, 21 Aug 2020 11:15:11 -0400 Source: sane-backends Binary: sane-utils libsane-common libsane libsane-dev libsane-dbg Architecture: powerpc powerpc_translations Version: 1.0.25+git20150528-1ubuntu2.16.04.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libsane - API library for scanners libsane-common - API library for scanners -- documentation and support files libsane-dbg - API development library for scanners [debug symbols] libsane-dev - API development library for scanners [development files] sane-utils - API library for scanners -- utilities Changes: sane-backends (1.0.25+git20150528-1ubuntu2.16.04.3) xenial-security; urgency=medium . * SECURITY UPDATE: memory disclosure via crafted SANE_NET_CONTROL_OPTION packet - debian/patches/CVE-2017-6318.patch: address memory corruption and information leakage in frontend/saned.c. - CVE-2017-6318 * SECURITY UPDATE: out-of-bounds read in epsonds - debian/patches/CVE-2020-12862.patch: do not read beyond the end of the token in backend/epsonds-cmd.c. - CVE-2020-12862 * SECURITY UPDATE: out-of-bounds read in epsonds - debian/patches/CVE-2020-12863.patch: read only up to seven hexdigits to determine payload size in backend/epsonds-cmd.c. - CVE-2020-12863 * SECURITY UPDATE: heap buffer overflow in epsonds - debian/patches/CVE-2020-12865.patch: check for overflow when reading image data in backend/epsonds-cmd.c, backend/epsonds.c, backend/epsonds.h. - CVE-2020-12865 * SECURITY UPDATE: NULL pointer dereference in epson2 - debian/patches/CVE-2020-12867.patch: rewrite network I/O in backend/epson2_net.c, backend/epson2_net.h. - CVE-2020-12867 Checksums-Sha1: 0547aa068b3f77a97f743a5647bc4fdc93c4b486 6761044 libsane-dbg_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb a57af82c0289bae55925e9f2c376baac3a2760ff 1308 libsane-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb b7f2a0f4a7ce1b3b68e57013848ceccd31d91054 1208 libsane-dev-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 8e1c11c0a4f61c638e1d3f5a2d7e1ff04f32783e 1891734 libsane-dev_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb 9e0d25c5993a1be088905984703aebb1f38c5b10 1785756 libsane_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb b287fbd843ee9546ea9603c435c25a6e948d9d00 576749 sane-backends_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc_translations.tar.gz 02c0075764f649f22c7cdbce695a8b05af62cd5b 1256 sane-utils-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 4bd36ee4ba8c11bf4a40daad07fc968336184a2e 167616 sane-utils_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb Checksums-Sha256: 104fc09de37ae75cf98b3002a483a991e6ae000287c7c8a4aa613c087903b2aa 6761044 libsane-dbg_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb bea168449a0eb2b9636ad43c08e5a169f4e9df00126e2ea9632cb0bf6650488f 1308 libsane-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 8067feccbec05cac4aee62ec4693cb2d7175c290fe2b90d5a31f8f4d431db90b 1208 libsane-dev-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 418e6deef35d3f9fd794330fe4b5e6779b879636477876925ad05530112b7182 1891734 libsane-dev_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb cfa27bf855780d9b3b94c6b61037e15d853101cc2e6a08e59bf607cfbccb2918 1785756 libsane_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb a7855bef61dc70164792300b141285e10796f562c5f76f7bae2e28957067d9b4 576749 sane-backends_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc_translations.tar.gz 6247ee51cb1974adaf1d1bf8b2f1c941ae99371ce897625ea2452d577950aef8 1256 sane-utils-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb dd4fe2b8a9efddbb88e91ce482a1dde87bbb871ba20cc0c30d2cd207fb11dbab 167616 sane-utils_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb Files: 3062b20fa8213958938fcf3a4375427e 6761044 debug extra libsane-dbg_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb 5ad87b52306fdc147eab1f63b0449fa0 1308 libs extra libsane-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 4e8b993643c39a3fb085ddd89f3a84ad 1208 libdevel extra libsane-dev-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb 0f7c6bdced7bd5481bba97c5526665a9 1891734 libdevel optional libsane-dev_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb 4bf30f073302b15d68fb6d908de64215 1785756 libs optional libsane_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb 2fa8d3884533c38dfabbd57c73aa3e0a 576749 raw-translations - sane-backends_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc_translations.tar.gz 202116b260390db453e7774b76be8f40 1256 graphics extra sane-utils-dbgsym_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.ddeb d982d4d4a0590aa489974880f6e4bce7 167616 graphics optional sane-utils_1.0.25+git20150528-1ubuntu2.16.04.3_powerpc.deb Original-Maintainer: Jörg Frings-Fürst