Accepted mono 3.2.8+dfsg-10+deb8u1 (source amd64 all) into oldstable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 01 Nov 2018 17:03:59 +0100 Source: mono Binary: mono-runtime-common mono-runtime mono-runtime-sgen mono-runtime-boehm mono-runtime-dbg mono-utils mono-complete libmono-2.0-1 libmono-2.0-dev libmonosgen-2.0-1 libmonosgen-2.0-1-dbg libmonosgen-2.0-dev libmonoboehm-2.0-1 libmonoboehm-2.0-1-dbg libmonoboehm-2.0-dev libmono-profiler libmono-cil-dev libmono2.0-cil libmono-posix2.0-cil libmono-posix4.0-cil libmono-codecontracts4.0-cil libmono-compilerservices-symbolwriter4.0-cil libmono-csharp4.0c-cil libmono-entityframework6.0-cil libmono-entityframework-sqlserver6.0-cil libmono-http4.0-cil libmono-web4.0-cil libmono-opensystem-c4.0-cil libmono-cecil-private-cil libmono-c5-1.1-cil libmono-webbrowser2.0-cil libmono-webbrowser4.0-cil libmono-management2.0-cil libmono-management4.0-cil libmono-messaging2.0-cil libmono-messaging4.0-cil libmono-messaging-rabbitmq2.0-cil libmono-messaging-rabbitmq4.0-cil libmono-rabbitmq2.0-cil libmono-rabbitmq4.0-cil libmono-simd2.0-cil libmono-simd4.0-cil libmono-corlib2.0-cil libmono-corlib4.0-cil libmono-corlib4.5-cil libmono-i18n4.0-all libmono-i18n2.0-cil libmono-i18n4.0-cil libmono-i18n-cjk4.0-cil libmono-i18n-mideast4.0-cil libmono-i18n-other4.0-cil libmono-i18n-rare4.0-cil libmono-i18n-west2.0-cil libmono-i18n-west4.0-cil libmono-parallel4.0-cil libmono-system2.0-cil libmono-system4.0-cil libmono-system-componentmodel-composition4.0-cil libmono-system-componentmodel-dataannotations4.0-cil libmono-system-configuration4.0-cil libmono-system-configuration-install4.0-cil libmono-system-core4.0-cil libmono-system-drawing4.0-cil libmono-system-dynamic4.0-cil libmono-system-enterpriseservices4.0-cil libmono-system-json2.0-cil libmono-system-json4.0-cil libmono-system-json-microsoft4.0-cil libmono-system-management4.0-cil libmono-system-net2.0-cil libmono-system-net4.0-cil libmono-system-net-http4.0-cil libmono-system-net-http-formatting4.0-cil libmono-system-numerics4.0-cil libmono-system-security4.0-cil libmono-system-serviceprocess4.0-cil libmono-system-threading-tasks-dataflow4.0-cil libmono-system-transactions4.0-cil libmono-system-xml4.0-cil libmono-system-xml-linq4.0-cil libmono-custommarshalers4.0-cil libmono-system-messaging2.0-cil libmono-system-messaging4.0-cil libmono-security2.0-cil libmono-security4.0-cil libmono-data-tds2.0-cil libmono-data-tds4.0-cil libmono-system-data2.0-cil libmono-system-data4.0-cil libmono-system-data-datasetextensions4.0-cil libmono-system-data-services2.0-cil libmono-system-data-services4.0-cil libmono-system-data-services-client4.0-cil libmono-system-data-linq2.0-cil libmono-system-data-linq4.0-cil libmono-system-drawing-design4.0-cil libmono-system-design4.0-cil libmono-system-identitymodel4.0-cil libmono-system-identitymodel-selectors4.0-cil libmono-system-reactive-core2.2-cil libmono-system-reactive-debugger2.2-cil libmono-system-reactive-experimental2.2-cil libmono-system-reactive-interfaces2.2-cil libmono-system-reactive-linq2.2-cil libmono-system-reactive-observable-aliases0.0-cil libmono-system-reactive-platformservices2.2-cil libmono-system-reactive-providers2.2-cil libmono-system-reactive-runtime-remoting2.2-cil libmono-system-reactive-windows-forms2.2-cil libmono-system-reactive-windows-threading2.2-cil libmono-system-runtime-serialization4.0-cil libmono-system-runtime-serialization-formatters-soap4.0-cil libmono-system-runtime-caching4.0-cil libmono-system-runtime-durableinstancing4.0-cil libmono-system-servicemodel4.0a-cil libmono-system-servicemodel-activation4.0-cil libmono-system-servicemodel-discovery4.0-cil libmono-system-servicemodel-routing4.0-cil libmono-system-servicemodel-web4.0-cil libmono-system-web2.0-cil libmono-system-web4.0-cil libmono-system-web-abstractions4.0-cil libmono-system-web-applicationservices4.0-cil libmono-system-web-dynamicdata4.0-cil libmono-system-web-extensions4.0-cil libmono-system-web-extensions-design4.0-cil libmono-system-web-http4.0-cil libmono-system-web-http-selfhost4.0-cil libmono-system-web-razor2.0-cil libmono-system-web-routing4.0-cil libmono-system-web-services4.0-cil libmono-system-web-mvc1.0-cil libmono-system-web-mvc2.0-cil libmono-system-web-mvc3.0-cil libmono-system-web-webpages2.0-cil libmono-system-web-webpages-deployment2.0-cil libmono-system-web-webpages-razor2.0-cil libmono-system-windows-forms4.0-cil libmono-system-windows-forms-datavisualization4.0a-cil libmono-system-xaml4.0-cil libmono-wcf3.0a-cil libmono-system-runtime2.0-cil libmono-system-runtime4.0-cil libmono-system-ldap2.0-cil libmono-system-ldap4.0-cil libmono-system-ldap-protocols4.0-cil libmono-winforms2.0-cil libmono-cairo2.0-cil libmono-cairo4.0-cil libmono-sharpzip2.6-cil libmono-sharpzip2.84-cil libmono-sharpzip4.84-cil libmono-npgsql2.0-cil libmono-npgsql4.0-cil libmono-db2-1.0-cil libmono-oracle2.0-cil libmono-oracle4.0-cil libmono-sqlite2.0-cil
Accepted tzdata 2018g-0+deb8u1 (source all) into oldstable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 31 Oct 2018 09:05:21 +0100 Source: tzdata Binary: tzdata tzdata-java Architecture: source all Version: 2018g-0+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: GNU Libc Maintainers Changed-By: Santiago Ruano Rincón Description: tzdata - time zone and daylight-saving time data tzdata-java - time zone and daylight-saving time data for use by java runtimes Changes: tzdata (2018g-0+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Update to latest upstream version, affecting the following past and future timestamps: - Morocco switched to permanent +01 on 2018-10-27. - Volgograd moved from +03 to +04 on 2018-10-28. - Fiji ends DST 2019-01-13, not 2019-01-20. - Most of Chile changes DST dates, effective 2019-04-06. Checksums-Sha1: dad13ab7c246442d36977f937ef91e531f1f2460 2018 tzdata_2018g-0+deb8u1.dsc 05824697e0ef77ce28f84c76e79c21984916bbe8 366408 tzdata_2018g.orig.tar.gz fa56354317ac692ce97b203226cfde8a274bf30e 104188 tzdata_2018g-0+deb8u1.debian.tar.xz 0cebdb853626227e7c6a1dca66c324779b86f5c7 232648 tzdata_2018g-0+deb8u1_all.deb 4aa017c00ed935f0f14ddbc77af4926a2db596a5 82090 tzdata-java_2018g-0+deb8u1_all.deb Checksums-Sha256: f40170aeb0283ee7fe0d74573b868952cfaa50d02ad535f3cb4937c8bc9c5500 2018 tzdata_2018g-0+deb8u1.dsc 02dfde534872f6513ae4553a3388fdae579441e31b862ea99170dfc447f46a16 366408 tzdata_2018g.orig.tar.gz bbc313ee2d22d6f432917f9792033d353406862f85ce5d978c6e36610ce48fcd 104188 tzdata_2018g-0+deb8u1.debian.tar.xz 7324db09c69772022305ea21da9b6e64d4e23a5377fa1b8e066f4c82b2b2b18d 232648 tzdata_2018g-0+deb8u1_all.deb 201cf2bf13970d1556514bd95f3cc9a869bd964cb8f1ceb1713f41575ebd21f4 82090 tzdata-java_2018g-0+deb8u1_all.deb Files: 637e9771d07d8c21b7f53f0f16fbd5e5 2018 localization required tzdata_2018g-0+deb8u1.dsc e71cb1f9d8d53c43904d79d7aeeedc1b 366408 localization required tzdata_2018g.orig.tar.gz 0273b5d1dbf026b69aa6e860c24b548f 104188 localization required tzdata_2018g-0+deb8u1.debian.tar.xz 6057cd80ad1d5333f8c9f4ae29cb16f8 232648 localization required tzdata_2018g-0+deb8u1_all.deb 9600863332ecb921300c43cff08df8be 82090 java optional tzdata-java_2018g-0+deb8u1_all.deb -BEGIN PGP SIGNATURE- iQJKBAEBCgA0FiEEwUqnBPVvaa0NAVzHFX/a4RXx4q0FAlva5O4WHHNhbnRpYWdv cnJAcmlzZXVwLm5ldAAKCRAVf9rhFfHirUzUD/0ViQNvNjpfggsYMnr7QJsh4lIL Offr3v7F14dc5+tlETMJQ7MvmVMJpIpLk9dfymsSZLkcrULVPoa2ALXY1otr9boB 3H8NLtvuISPHbFiQO61UPUylvuHShNc4cIB6w9OCFsfhXgexYzoENtz57wG04X0m X/FyzJFT2ZLQoL66BZbSUeBtuzYGbUaSzZ65uqPlxDKwSh9rXSZnhueZeSatjjTp fHmcR9UD3J3g1/CDDeyVyd7lt9p7CIWzXFFStUnsbG6GLnqL2qhrg2KwWNb7RrSp LSg7p7/tznpUo67VvpHXowNmyMi4FiODsXN0ThFXrB5tFo7y286bUf4UHuEhG+dG K50QM/0ccD+qr9BmXX/JIpEdifIEwOdbsx1kSs1BH/5q2aXFCdg5WYyOLUyMbesr arSSzAq8rsqkpsZFjLKg6IY943YkoE+Nzbf57XGQnvoDv0Q9AjiC7zbSfuLsyHiv darr+DHFLu6Odfuw1nj9KBhvQ1U6PodgLQPi98jPti3tbY7uNw/AOzyagb6M/fiQ RYxw7iejzntlCUPHNqT7ULrid4aCVlrW1acJmU7L2UaPUJFp1wPPwyd8vHymjeW1 Dp3Ay5fYT1W91XQvMo6nI3S4fVnUaMVZRTSzYT7CPQr8XU/Vc4AFmr+rZNT6MW7n cGdi/CKhVhOz4K8o2w== =2Zc2 -END PGP SIGNATURE-
Accepted poppler 0.26.5-2+deb8u5 (source amd64 all) into oldstable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 31 Oct 2018 12:47:07 +0100 Source: poppler Binary: libpoppler46 libpoppler-dev libpoppler-private-dev libpoppler-glib8 libpoppler-glib-dev libpoppler-glib-doc gir1.2-poppler-0.18 libpoppler-qt4-4 libpoppler-qt4-dev libpoppler-qt5-1 libpoppler-qt5-dev libpoppler-cpp0 libpoppler-cpp-dev poppler-utils poppler-dbg Architecture: source amd64 all Version: 0.26.5-2+deb8u5 Distribution: jessie-security Urgency: medium Maintainer: Loic Minier Changed-By: Mike Gabriel Description: gir1.2-poppler-0.18 - GObject introspection data for poppler-glib libpoppler-cpp-dev - PDF rendering library -- development files (CPP interface) libpoppler-cpp0 - PDF rendering library (CPP shared library) libpoppler-dev - PDF rendering library -- development files libpoppler-glib-dev - PDF rendering library -- development files (GLib interface) libpoppler-glib-doc - PDF rendering library -- documentation for the GLib interface libpoppler-glib8 - PDF rendering library (GLib-based shared library) libpoppler-private-dev - PDF rendering library -- private development files libpoppler-qt4-4 - PDF rendering library (Qt 4 based shared library) libpoppler-qt4-dev - PDF rendering library -- development files (Qt 4 interface) libpoppler-qt5-1 - PDF rendering library (Qt 5 based shared library) libpoppler-qt5-dev - PDF rendering library -- development files (Qt 5 interface) libpoppler46 - PDF rendering library poppler-dbg - PDF rendering library -- debugging symbols poppler-utils - PDF utilities (based on Poppler) Closes: 898357 909802 Changes: poppler (0.26.5-2+deb8u5) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2018-16646: Handle duplicate objects more robustly. Prohibit DoS attacks via crafted PDF files causing inifinite recursions. (Closes: #909802). This fix adds the following patches: + upstream_Fix-rendering-of-some-broken-PDF-files.patch + upstream_Allow-newlines-in-num-gen-obj-sequence.patch + upstream_XRef-Fix-runtime-undefined-behaviour.patch + upstream_CVE-2018-16646_Fail-when-PDF-contains-duplicate-objects.patch + upstream_CVE-2018-16646_Allow-duplicated-objects-in-incremental-updates. patch * CVE-2018-10768: Fix crash on AnnotInk::draw for malformed documents. * CVE-2017-18267: FoFiType1C::cvtGlyph: Fix infinite recursion on malformed documents. (Closes: #898357). * CVE-2018-13988.patch: Fix crash when Object has negative number. Specs say, number has be > 0 and gen >= 0. Original upstream patch backported to old Object API: + upstream-modified_CVE-2018-13988.patch Checksums-Sha1: 1b74b217b107a888c7ae5f1b9fe09b30a9e205e9 3331 poppler_0.26.5-2+deb8u5.dsc 5f56ef63b712c356e7cfb833a5a7f04255bae33a 41356 poppler_0.26.5-2+deb8u5.debian.tar.xz d330a0c7fde7d6bcf3cc3023afbdc6613d6454dd 1213944 libpoppler46_0.26.5-2+deb8u5_amd64.deb 586ddb413f6c2f72f24bd8b571e2330ff03b0dcf 768576 libpoppler-dev_0.26.5-2+deb8u5_amd64.deb e6ed488e5059888ddeb25612dd66dfeab9ebba9d 180710 libpoppler-private-dev_0.26.5-2+deb8u5_amd64.deb f72206a1d66e0ffc97249e7aad911b9de932ebfa 122298 libpoppler-glib8_0.26.5-2+deb8u5_amd64.deb 0ace8ee98f8bfd80db5552c38d7b2a2ae66aadb1 163500 libpoppler-glib-dev_0.26.5-2+deb8u5_amd64.deb bf325a5d1f6a9b64ff0f76d31fe751b7c49bc1be 85842 libpoppler-glib-doc_0.26.5-2+deb8u5_all.deb 4294f5ab3b3910e4d2ce4dde255124016390fc58 34326 gir1.2-poppler-0.18_0.26.5-2+deb8u5_amd64.deb db1498584cdeb6278d5deed4083bf5ef3be31a9a 127708 libpoppler-qt4-4_0.26.5-2+deb8u5_amd64.deb 2002f6798b9b3d21b55c44d26e9a73cdcc804db7 158900 libpoppler-qt4-dev_0.26.5-2+deb8u5_amd64.deb bb1fdce423892eaccd47451a986ab7f0edabe5ff 132238 libpoppler-qt5-1_0.26.5-2+deb8u5_amd64.deb 0b012fd7a1390cd875b6ae8ae6f3c6db74c3fd84 165658 libpoppler-qt5-dev_0.26.5-2+deb8u5_amd64.deb 886674499ec98bf25343497666fc2413359751f2 44778 libpoppler-cpp0_0.26.5-2+deb8u5_amd64.deb 2b2b8ac0289c7c8b8a4aa3385be6b2e2d974516c 49336 libpoppler-cpp-dev_0.26.5-2+deb8u5_amd64.deb e2edcd563a0411d2b4805e7c1de003e018fb6151 140904 poppler-utils_0.26.5-2+deb8u5_amd64.deb 75524dc64725452d4ab5d0993f8fe50df4414190 7699424 poppler-dbg_0.26.5-2+deb8u5_amd64.deb Checksums-Sha256: 902cba51b4898917e0e86e11a71b01834faf6ed7174a7334ffc0985a6cbb858f 3331 poppler_0.26.5-2+deb8u5.dsc fa1784e8629ad163d1c5f786a9c80974d57be2b82b4e84a57acfb4bc0a2611d9 41356 poppler_0.26.5-2+deb8u5.debian.tar.xz b17ea73d482a2072560f630bc7d98b91b96e409de47560310561bee2d3224c86 1213944 libpoppler46_0.26.5-2+deb8u5_amd64.deb 7ce04869e65d67689562a2288c898480bbfa65732fd4b1030ac0924ae4f00dd9 768576 libpoppler-dev_0.26.5-2+deb8u5_amd64.deb 6b6f57f2338427dfea852a23d256b3fd0f46e54475caa8b29c1d3d9f01a4721a 180710 libpoppler-private-dev_0.26.5-2+deb8u5_amd64.deb 12545af75fc9f5487bcd9c671431c1d112a38e3f47e75ab0b7d56083dc7a 122298 libpoppler-glib8_0.26.5-2+deb8u5_amd64.deb
