Format: 1.8 Date: Fri, 21 Aug 2020 10:48:50 -0400 Source: sane-backends Binary: libsane libsane-dev libsane1 sane-utils Architecture: arm64 arm64_translations Version: 1.0.29-0ubuntu5.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libsane - API library for scanners libsane-dev - API development library for scanners [development files] libsane1 - API library for scanners [transitional package] sane-utils - API library for scanners -- utilities Changes: sane-backends (1.0.29-0ubuntu5.1) focal-security; urgency=medium . * SECURITY UPDATE: multiple issues in epsonds network discovery - debian/patches/CVE-2020-12861_12864_12866.patch: disable network autodiscovery in backend/epsonds.conf.in. - CVE-2020-12861 - CVE-2020-12864 - CVE-2020-12866 * SECURITY UPDATE: out-of-bounds read in epsonds - debian/patches/CVE-2020-12862.patch: do not read beyond the end of the token in backend/epsonds-cmd.c. - CVE-2020-12862 * SECURITY UPDATE: out-of-bounds read in epsonds - debian/patches/CVE-2020-12863.patch: read only up to seven hexdigits to determine payload size in backend/epsonds-cmd.c. - CVE-2020-12863 * SECURITY UPDATE: heap buffer overflow in epsonds - debian/patches/CVE-2020-12865.patch: check for overflow when reading image data in backend/epsonds-cmd.c, backend/epsonds.c, backend/epsonds.h. - CVE-2020-12865 * SECURITY UPDATE: NULL pointer dereference in epson2 - debian/patches/CVE-2020-12867.patch: rewrite network I/O in backend/epson2_net.c, backend/epson2_net.h. - CVE-2020-12867 Checksums-Sha1: b680afb87f9977d5e3ddb462aa17ad25914a4a8e 15618300 libsane-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb 6c2ce0ef30fcf2f1bd63d34223fb4892f121a4d7 2188316 libsane-dev_1.0.29-0ubuntu5.1_arm64.deb a9eb7ba99c4c9c847a7555d86506cce96fbcae3f 14220 libsane1_1.0.29-0ubuntu5.1_arm64.deb 205e447f9ee817ecc098104dedb55ce6c9341ea9 2246580 libsane_1.0.29-0ubuntu5.1_arm64.deb 9e6379748d890b348547a359356861c74e7bde60 10656 sane-backends_1.0.29-0ubuntu5.1_arm64.buildinfo c512fb1a4e00e81af5b64f64f402238028277f39 856190 sane-backends_1.0.29-0ubuntu5.1_arm64_translations.tar.gz 5b8f8d90b9ef79ff13e6fcaa82b3b5cafa6caf58 380400 sane-utils-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb a40904c91bbf16be8ae171e9e81af802d536d164 186744 sane-utils_1.0.29-0ubuntu5.1_arm64.deb Checksums-Sha256: 23b5ebb460c55f6abecee3d880d255dbf28e7bd97b4b9a4329909a9302746583 15618300 libsane-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb 21c4d9e9fb46c3b126753cfa3880125023039528f119e7240816d41894a08278 2188316 libsane-dev_1.0.29-0ubuntu5.1_arm64.deb c13ecfb29bea1e10778b3cc23db3a4fb3e1882c0761a090f942b02b878c73dfc 14220 libsane1_1.0.29-0ubuntu5.1_arm64.deb 4490eab71c2cef9487626be641fbbe9b0239d551bb722a0d75719cebf9b74b65 2246580 libsane_1.0.29-0ubuntu5.1_arm64.deb 59555e3e3764a2bada7f789426379045ed1c1c35fe05d0181b3be65a3366b6a9 10656 sane-backends_1.0.29-0ubuntu5.1_arm64.buildinfo 9a284a6c7fdd018d7015e67d4566d74f7aa9d55634d4e18cd3ba44c43f0a5d47 856190 sane-backends_1.0.29-0ubuntu5.1_arm64_translations.tar.gz 57bb3f3199b2ccbd4519fd53b540e24f1b90a60f38cb981a6fa0758f0c1058a7 380400 sane-utils-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb 528dd8b2e84ca051019ab0eb24d3cff1fa9a918e7c9a61fdc9d1ea949498446d 186744 sane-utils_1.0.29-0ubuntu5.1_arm64.deb Files: c5fd3f90058174dc9fa69e973c0ca6dd 15618300 debug optional libsane-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb 189d9ea6e71ab34742950531405240bc 2188316 libdevel optional libsane-dev_1.0.29-0ubuntu5.1_arm64.deb 34c539ffb458760de17d33018ecfc9cc 14220 oldlibs optional libsane1_1.0.29-0ubuntu5.1_arm64.deb 2d5a3351e849ed1468aaf7610ef857d0 2246580 libs optional libsane_1.0.29-0ubuntu5.1_arm64.deb 0b683896ac06af68218a3f6d20a4d13b 10656 graphics optional sane-backends_1.0.29-0ubuntu5.1_arm64.buildinfo 62525fed680a5fd868401b92f6a46c16 856190 raw-translations - sane-backends_1.0.29-0ubuntu5.1_arm64_translations.tar.gz c40bab08c95efd45ef3160a00c317953 380400 debug optional sane-utils-dbgsym_1.0.29-0ubuntu5.1_arm64.ddeb 351de23afa173672943c7fda1d2ad761 186744 graphics optional sane-utils_1.0.29-0ubuntu5.1_arm64.deb Original-Maintainer: Jörg Frings-Fürst