Format: 1.8
Date: Mon, 17 May 2021 09:19:55 -0400
Source: djvulibre
Binary: libdjvulibre-dev libdjvulibre21 libdjvulibre-text djvulibre-desktop djview djview3 djvuserve djvulibre-bin
Architecture: all amd64
Version: 3.5.27.1-8ubuntu0.3
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-018.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 djview     - Transition package, djview3 to djview4
 djview3    - Transition package, djview3 to djview4
 djvulibre-bin - Utilities for the DjVu image format
 djvulibre-desktop - Desktop support for the DjVu image format
 djvuserve  - CGI program for unbundling DjVu files on the fly
 libdjvulibre-dev - Development files for the DjVu image format
 libdjvulibre-text - Linguistic support files for libdjvulibre
 libdjvulibre21 - Runtime support for the DjVu image format
Changes:
 djvulibre (3.5.27.1-8ubuntu0.3) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Stack overflow
     - debian/patches/CVE-2021-3500.patch: prevent recursion in
       libdjvu/DjVuPort.cpp, libdjvu/DjVuPort.h.
     - CVE-2021-3500
   * SECURITY UPDATE: Out of bounds write
     - debian/patches/CVE-2021-32490.patch: add checks to
       libdjvu/IW44Image.cpp.
     - CVE-2021-32490
   * SECURITY UPDATE: Integer overflow
     - debian/patches/CVE-2021-32491.patch: check for overflow in
       tools/ddjvu.cpp.
     - CVE-2021-32491
   * SECURITY UPDATE: Out of bounds read
     - debian/patches/CVE-2021-32492.patch: check pool in
       libdjvu/DataPool.cpp.
     - CVE-2021-32492
   * SECURITY UPDATE: Heap buffer overflow
     - debian/patches/CVE-2021-32493.patch: check row size in
       libdjvu/GBitmap.cpp.
     - CVE-2021-32493
   * debian/patches: rename debian-changes to changes.patch to simplify
     maintenance.
Checksums-Sha1:
 9eded407e41d5d9c7195859b32ee5c93ac26108a 5348 djview3_3.5.27.1-8ubuntu0.3_all.deb
 97e8725cdc7db6ffb45f9d9cad1443ea093dc971 5352 djview_3.5.27.1-8ubuntu0.3_all.deb
 67d7a7e15df8e7eab7cf52b74ce92fda59f9e1a1 1348692 djvulibre-bin-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 6755ba81d96a49ca303ad7a9d95dea3869440756 285612 djvulibre-bin_3.5.27.1-8ubuntu0.3_amd64.deb
 c61827bb7fccddfe7db3c8aab2e1923056ff74a1 79644 djvulibre-desktop_3.5.27.1-8ubuntu0.3_all.deb
 06cda6d823349f797c13bef6780a9defa08175d0 12486 djvulibre_3.5.27.1-8ubuntu0.3_amd64.buildinfo
 9e4333706eb4b93ab240044278d012f04d165458 63296 djvuserve-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 1934a1a2a52eff60b4affdad15ce5eb1e4d5c507 20472 djvuserve_3.5.27.1-8ubuntu0.3_amd64.deb
 4ead86970e530f8a3ea9c7a1d64d7d2394675f55 2381788 libdjvulibre-dev_3.5.27.1-8ubuntu0.3_amd64.deb
 8415d2eddfb7bc7cd05f8c465ee95a9d8b4b1a2a 49376 libdjvulibre-text_3.5.27.1-8ubuntu0.3_all.deb
 3d06ddb7fe310275cdeea14d69da87792f3c2add 2876144 libdjvulibre21-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 d28f03cb7cd5f4e7e1a4a7147eb92dba56ab140b 560836 libdjvulibre21_3.5.27.1-8ubuntu0.3_amd64.deb
Checksums-Sha256:
 689b95702c119cafdd38f7a2acdd7fffb7abcf6e9989b3f6f3e4fafc86abff2d 5348 djview3_3.5.27.1-8ubuntu0.3_all.deb
 7edde05f24994707300af9d7f95f9f23958a8bb28ce5a8b038213e6fb3aa316a 5352 djview_3.5.27.1-8ubuntu0.3_all.deb
 a3273def29509ff716f24d0c2151bd3fb62d80f270b400ebe03036e2b5ad954c 1348692 djvulibre-bin-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 d8fec372cb9bfabd39c2e1f009ff9c9f1641a6c218866e8c2f1b41fd8d331fcb 285612 djvulibre-bin_3.5.27.1-8ubuntu0.3_amd64.deb
 8d791bfb1a3869d6848f5aef7f2ad3259733012b19c9cc0e60ae6805942c2fe3 79644 djvulibre-desktop_3.5.27.1-8ubuntu0.3_all.deb
 46f1335da0c125374e525219d205bfd82a6c840307e5f40635113136c2177508 12486 djvulibre_3.5.27.1-8ubuntu0.3_amd64.buildinfo
 c380cbfe7e07962b1694e0e24cd41eb6050141bb8730128ce3d0183f4bd1b6e5 63296 djvuserve-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 d41e2ee75ddf5c2254253398d3c905e11c0003ce4989eb956a692569ab2d701d 20472 djvuserve_3.5.27.1-8ubuntu0.3_amd64.deb
 3aeffde34082db302f8b533e3a0b671d56973bc06d0daf83aa9a22800b5a4b98 2381788 libdjvulibre-dev_3.5.27.1-8ubuntu0.3_amd64.deb
 9d4ac08cdb84edc9f86f13ba2bce53adf4b98f355477a58f1902a7b8531fab50 49376 libdjvulibre-text_3.5.27.1-8ubuntu0.3_all.deb
 9b156a609097d4830445e58182a844e0e76b7f4dfe3d870f0f44047e72e359a2 2876144 libdjvulibre21-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 1a098fe9d808f152be63519e3a53e3dbd404be6b41bd0262dadfc9d128e6e774 560836 libdjvulibre21_3.5.27.1-8ubuntu0.3_amd64.deb
Files:
 d167b26a1ef12224da8207f23be6c5ee 5348 graphics optional djview3_3.5.27.1-8ubuntu0.3_all.deb
 a8a0203597cec6964843109364f1bdf3 5352 graphics optional djview_3.5.27.1-8ubuntu0.3_all.deb
 94fce1842bb5b8a53297e7a7e3dd613f 1348692 debug optional djvulibre-bin-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 1726f5e7fc5743ab1b0c3a582bde23f6 285612 graphics optional djvulibre-bin_3.5.27.1-8ubuntu0.3_amd64.deb
 026ce65bf3e316458abf838e7655f32c 79644 libs optional djvulibre-desktop_3.5.27.1-8ubuntu0.3_all.deb
 2be29171aa045bfae6d6af5cd3967a3c 12486 libs optional djvulibre_3.5.27.1-8ubuntu0.3_amd64.buildinfo
 13d8fdb0cacbbb1bd0795c0550307198 63296 debug optional djvuserve-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 29e4d226057d87e36eb966c7c1b75486 20472 web optional djvuserve_3.5.27.1-8ubuntu0.3_amd64.deb
 d4927f4649a7ec3ce6818da705ef5701 2381788 libdevel optional libdjvulibre-dev_3.5.27.1-8ubuntu0.3_amd64.deb
 420d7634c194b97da95eae2b8b6c14ef 49376 libs optional libdjvulibre-text_3.5.27.1-8ubuntu0.3_all.deb
 0b051ea352b24ba20f0ce3d85fb23550 2876144 debug optional libdjvulibre21-dbgsym_3.5.27.1-8ubuntu0.3_amd64.ddeb
 660a02eda766bcbbcedac6fc07bb96f7 560836 libs optional libdjvulibre21_3.5.27.1-8ubuntu0.3_amd64.deb
Original-Maintainer: Barak A. Pearlmutter <bap@debian.org>