Your message dated Sun, 29 Dec 2019 11:47:09 +0000
with message-id <[email protected]>
and subject line Bug#929597: fixed in freeimage 3.18.0+ds2-1+deb10u1
has caused the Debian Bug report #929597,
regarding freeimage: CVE-2019-12211 CVE-2019-12213
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
929597: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929597
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: freeimage
Severity: grave
Tags: security
Please see
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12212
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12214
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: freeimage
Source-Version: 3.18.0+ds2-1+deb10u1
We believe that the bug you reported is fixed in the latest version of
freeimage, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hugo Lefeuvre <[email protected]> (supplier of updated freeimage package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 10 Dec 2019 16:34:27 +0100
Source: freeimage
Binary: libfreeimage-dev libfreeimage3 libfreeimage3-dbgsym
libfreeimageplus-dev libfreeimageplus-doc libfreeimageplus3
libfreeimageplus3-dbgsym
Architecture: source amd64 all
Version: 3.18.0+ds2-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Science Maintainers
<[email protected]>
Changed-By: Hugo Lefeuvre <[email protected]>
Description:
libfreeimage-dev - Support library for graphics image formats (development
files)
libfreeimage3 - Support library for graphics image formats (library)
libfreeimageplus-dev - C++ wrappers for FreeImage (development files)
libfreeimageplus-doc - C++ wrappers for FreeImage (documentation)
libfreeimageplus3 - C++ wrappers for freeimage (library)
Closes: 929597
Changes:
freeimage (3.18.0+ds2-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* CVE-2019-12213: stack exhaustion caused by unwanted recursion in
ReadThumbnail (Closes: #929597).
* CVE-2019-12211: heap buffer overflow caused by invalid memcpy in
PluginTIFF.
Checksums-Sha1:
fefc6245cb0f0dd938872db61158c4e29a1a754f 2393
freeimage_3.18.0+ds2-1+deb10u1.dsc
5c5f67837bd03cb2be596eb66d6edae735a4370d 1281524
freeimage_3.18.0+ds2.orig.tar.xz
9ee068a95cb08c8a3f729f7cb600b9b03bd0e7ab 22048
freeimage_3.18.0+ds2-1+deb10u1.debian.tar.xz
9e45ec8911bc8ec39c4c712bce059f8441d08359 8231
freeimage_3.18.0+ds2-1+deb10u1_amd64.buildinfo
fd6e4fc10947c1dc40048211e9b17faf8197361a 45920
libfreeimage-dev_3.18.0+ds2-1+deb10u1_amd64.deb
d4ce4ac9a69d0e7f2b25561a8c3335ae044f7da5 2253880
libfreeimage3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
ab08bb23f05f1c2b3d8bd6fec3dbf0abc3599a4d 293676
libfreeimage3_3.18.0+ds2-1+deb10u1_amd64.deb
e927a109ce050d70591804da3b18ffa817e42346 46080
libfreeimageplus-dev_3.18.0+ds2-1+deb10u1_amd64.deb
b07ef20db937d0afb5afc5c7a3bc23a29f9d2eb3 168560
libfreeimageplus-doc_3.18.0+ds2-1+deb10u1_all.deb
ff7ad76bc0f4eb68caa9d807dd762f19a9800381 43192
libfreeimageplus3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
3a58f0f915ea343074752a5c37e3e2d92d5d9d15 46952
libfreeimageplus3_3.18.0+ds2-1+deb10u1_amd64.deb
Checksums-Sha256:
0b488c749a10ef02ff55fd51508824fe91203ece48604c3091d59b1cab543e2f 2393
freeimage_3.18.0+ds2-1+deb10u1.dsc
4425d04d4691084260848d67eb79949ea7c129d85c73a72066ba609fd3f3aa39 1281524
freeimage_3.18.0+ds2.orig.tar.xz
ad7e5f584ba8a7514a29cef5aad6e840b3346899e80db4f5d9aeb13259b61afe 22048
freeimage_3.18.0+ds2-1+deb10u1.debian.tar.xz
73a0e2a5f7eb9d0cd2f04a8ee5321bae00578eced9dd6f9f5b246019d3731a91 8231
freeimage_3.18.0+ds2-1+deb10u1_amd64.buildinfo
c1b610a683cf6b0053c8cdf862fcf0a0d825b73860a9f6473f81bf07f7464d22 45920
libfreeimage-dev_3.18.0+ds2-1+deb10u1_amd64.deb
743af84a4da0644f2815d7572270c4dad836402c921c7bf1f2653ec661e2d968 2253880
libfreeimage3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
838abede562c882fb34fd64b91468a175bef72b466aa8e326e6e3c92638f226b 293676
libfreeimage3_3.18.0+ds2-1+deb10u1_amd64.deb
90dd8c7a66a099dda7cab6316e3f6cdc381fe8d76fd9212765b40f1afebfd7aa 46080
libfreeimageplus-dev_3.18.0+ds2-1+deb10u1_amd64.deb
e589a71170b63652cae70ee48f61184d89f844895d037f3b0964c28e3877add1 168560
libfreeimageplus-doc_3.18.0+ds2-1+deb10u1_all.deb
e5979575b9ad362c4aa372864efcb9e321266044b3f66dbb64627f8aa9be50df 43192
libfreeimageplus3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
0cd5fd7b029d5c78861bc4d30299c42fe3e4d2c4daa141084df49ffb9787b15e 46952
libfreeimageplus3_3.18.0+ds2-1+deb10u1_amd64.deb
Files:
c8d4dda2dc783dea8eff335e7bbc262c 2393 libs optional
freeimage_3.18.0+ds2-1+deb10u1.dsc
bf8d7f34b419266773255855aadfd808 1281524 libs optional
freeimage_3.18.0+ds2.orig.tar.xz
0a127cd64c3266825d1b82ccb8837307 22048 libs optional
freeimage_3.18.0+ds2-1+deb10u1.debian.tar.xz
ab95d56eb286ab316a7f4be5bfee233a 8231 libs optional
freeimage_3.18.0+ds2-1+deb10u1_amd64.buildinfo
7b030ac480add7da5326f42bef283f64 45920 libdevel optional
libfreeimage-dev_3.18.0+ds2-1+deb10u1_amd64.deb
1f9e6f71772b94a3db5bf50897dfcfd4 2253880 debug optional
libfreeimage3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
7bff242ed1f9a29ecb39a8871e01085b 293676 libs optional
libfreeimage3_3.18.0+ds2-1+deb10u1_amd64.deb
0c43f5ae84ec0a43e5740a03dbbbff76 46080 libdevel optional
libfreeimageplus-dev_3.18.0+ds2-1+deb10u1_amd64.deb
d0e3bd259bb9a3ddec7165448005918f 168560 doc optional
libfreeimageplus-doc_3.18.0+ds2-1+deb10u1_all.deb
b6d7b8214a3d7157c8254e3de7ee4b0d 43192 debug optional
libfreeimageplus3-dbgsym_3.18.0+ds2-1+deb10u1_amd64.deb
3fde1eb7bb187a177dba3b37a89be403 46952 libs optional
libfreeimageplus3_3.18.0+ds2-1+deb10u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=XLa2
-----END PGP SIGNATURE-----
--- End Message ---
--
debian-science-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers
