Your message dated Wed, 01 Jan 2020 08:43:22 +0000
with message-id <[email protected]>
and subject line Bug#929597: fixed in freeimage 3.18.0+ds2-3
has caused the Debian Bug report #929597,
regarding freeimage: CVE-2019-12211 CVE-2019-12213
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
929597: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929597
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: freeimage
Severity: grave
Tags: security
Please see
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12212
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12214
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: freeimage
Source-Version: 3.18.0+ds2-3
We believe that the bug you reported is fixed in the latest version of
freeimage, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anton Gladky <[email protected]> (supplier of updated freeimage package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 31 Dec 2019 20:58:58 +0100
Source: freeimage
Architecture: source
Version: 3.18.0+ds2-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Maintainers
<[email protected]>
Changed-By: Anton Gladky <[email protected]>
Closes: 929597
Changes:
freeimage (3.18.0+ds2-3) unstable; urgency=medium
.
[ Hugo Lefeuvre ]
* CVE-2019-12213: stack exhaustion caused by unwanted recursion in
ReadThumbnail (Closes: #929597).
* CVE-2019-12211: heap buffer overflow caused by invalid memcpy in
PluginTIFF.
.
[ Anton Gladky ]
* [2a2e206] Bump debhelper from old 11 to 12.
* [044ea9c] Set debhelper-compat version in Build-Depends.
* [f776923] Set Standards-Version to 4.4.1. No changes
* [5417d72] Replace ADTTMP by AUTOPKGTEST_TMP
Checksums-Sha1:
0bf7ec93f64a30af497a9571cfa59191453b843d 2540 freeimage_3.18.0+ds2-3.dsc
64e1dccdd7da8c714fa336130f0c6b89c3516094 22116
freeimage_3.18.0+ds2-3.debian.tar.xz
3256faa94f09d644104cff35e38bd51497cea5a9 6780
freeimage_3.18.0+ds2-3_source.buildinfo
Checksums-Sha256:
8d6695e34fab61339d15b79680d5eb5a10c139f1ce9452f3f4a8a9abea9a8fc4 2540
freeimage_3.18.0+ds2-3.dsc
d6113b725b7037e9bbac1c5f051accd4e8b8cee2a87e3cbc6fe3fbc45dea1aea 22116
freeimage_3.18.0+ds2-3.debian.tar.xz
ff190e874f3cf37f20446212e230f09bfa05fd006ca668a8701a5d9176c2086f 6780
freeimage_3.18.0+ds2-3_source.buildinfo
Files:
add9bd5cf1991c8580c5d339b57e0218 2540 libs optional freeimage_3.18.0+ds2-3.dsc
bfb02091b570f4b159e0d2f2ce981a31 22116 libs optional
freeimage_3.18.0+ds2-3.debian.tar.xz
71f1d88eeebf56d052d178e6c41454b5 6780 libs optional
freeimage_3.18.0+ds2-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Ei/U
-----END PGP SIGNATURE-----
--- End Message ---
--
debian-science-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers
