-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Dec 2019 22:07:45 +0100 Source: exiv2 Binary: exiv2 libexiv2-13 libexiv2-dev libexiv2-doc libexiv2-dbg Architecture: source amd64 all Version: 0.24-4.1+deb8u5 Distribution: jessie-security Urgency: medium Maintainer: Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org> Changed-By: Dylan Aïssi <daissi@debian.org> Description: exiv2 - EXIF/IPTC metadata manipulation tool libexiv2-13 - EXIF/IPTC metadata manipulation library libexiv2-dbg - EXIF/IPTC metadata manipulation library - debug libexiv2-dev - EXIF/IPTC metadata manipulation library - development files libexiv2-doc - EXIF/IPTC metadata manipulation library - HTML documentation Changes: exiv2 (0.24-4.1+deb8u5) jessie-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * CVE-2019-17402: Corrupted or specially crafted CRW images might exceed the overall buffersize. Checksums-Sha1: e22386b76fda97b146368caf14f81251edef51c0 2320 exiv2_0.24-4.1+deb8u5.dsc 2f19538e54f8c21c180fa96d17677b7cff7dc1bb 4635028 exiv2_0.24.orig.tar.gz 46c362218c53a3757a1da0474eba5f35aad673fd 21420 exiv2_0.24-4.1+deb8u5.debian.tar.xz d02ade5d747cf18bbed423b5667fac08b6846c8a 95114 exiv2_0.24-4.1+deb8u5_amd64.deb e5e4e7e791e6b0ae49c1ba46e06e136a8a40c958 730524 libexiv2-13_0.24-4.1+deb8u5_amd64.deb 6ce820e875ae0227f6773398fa107cd8686f595b 1110082 libexiv2-dev_0.24-4.1+deb8u5_amd64.deb 49bed75177e2102a11262c39a965632088c62890 18908352 libexiv2-doc_0.24-4.1+deb8u5_all.deb e49c94c4beac381003d13b1ba9e70c8ade9a4eb5 5530430 libexiv2-dbg_0.24-4.1+deb8u5_amd64.deb Checksums-Sha256: 34ba126b7804197374a47997e2edd7f9c463cb05e4c2a66f8184ae54cc31caf3 2320 exiv2_0.24-4.1+deb8u5.dsc f4a443e6c7fb9d9f5e787732f76969a64c72c4c04af69b10ed57f949c2dfef8e 4635028 exiv2_0.24.orig.tar.gz 9d296a641d0a93b79d6bf160366de609d7b4d2bc996d79f12a2c0d26f7607530 21420 exiv2_0.24-4.1+deb8u5.debian.tar.xz 5277a695d7eeb2ff56e27899e71364979337e92151cc3040de63d63b506e1b08 95114 exiv2_0.24-4.1+deb8u5_amd64.deb 3219aab3c8de8ec4afa746004268d6a0581979a699c728476e6f4dc02d0dafa9 730524 libexiv2-13_0.24-4.1+deb8u5_amd64.deb d449087bb5b41ce58246209af949e12061d22fd8bf6be192a40b37fe9862c470 1110082 libexiv2-dev_0.24-4.1+deb8u5_amd64.deb d8c947311e194fe827a7adbf1098aebf08f76923eb6a9bfd9d66e32d43e0b4af 18908352 libexiv2-doc_0.24-4.1+deb8u5_all.deb 6f4db5a04aa8279abe55835afb1074ad191e4218c0882fdd36d9ae5b7b8f679e 5530430 libexiv2-dbg_0.24-4.1+deb8u5_amd64.deb Files: 98267bb8c60c51fd9c10c30df3ca5418 2320 graphics optional exiv2_0.24-4.1+deb8u5.dsc b8a23dc56a98ede85c00718a97a8d6fc 4635028 graphics optional exiv2_0.24.orig.tar.gz d00cc02adfd9de2d27f743ff991b0d6a 21420 graphics optional exiv2_0.24-4.1+deb8u5.debian.tar.xz 4fec9d910459ca5003bf271be83e384e 95114 graphics optional exiv2_0.24-4.1+deb8u5_amd64.deb 0fb66dfbe5e9232204a8a161bd5e473f 730524 libs optional libexiv2-13_0.24-4.1+deb8u5_amd64.deb 18b11cf668ea998765ef4e96a328a12a 1110082 libdevel optional libexiv2-dev_0.24-4.1+deb8u5_amd64.deb b5c327d4f83246a9c0a38d59c40a2aad 18908352 doc optional libexiv2-doc_0.24-4.1+deb8u5_all.deb ccfa0c12fb275a539cdce4097cbd5233 5530430 debug extra libexiv2-dbg_0.24-4.1+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEmjwHvQbeL0FugTpdYS7xYT4FD1QFAl3llXkSHGRhaXNzaUBk ZWJpYW4ub3JnAAoJEGEu8WE+BQ9UiqEP/jFfOT2bD1N3tiqGeAkc0U+zT/BNGLfO sjnW+LC39ZrgejHsxJXxBHSoZFNT4YOjaub31WzPCFmlyD07a66UEZC6cofd7TUr ws81BoM/24eXs7oUFjUSO0CbHsV+A2kGbh7cV66TRIEw6Q9FjTnEGu7RQpcpK1QV j9cqGOrpVgOmB8FF30kav8kEjeZo/mH5gtswG5IK9R8FtGE2OO66lFbV5zCAQA0j pmRylmMRWBZxJSBX8Z7yraVJPjTzNA3MvzLgRv+4e2uRb2bB9UmdaaCz8eyLIzQ+ kzQNxDK6JBsUIalYk/fNAILhlrkC0JlZfF4TVRfsvTXL0svh5MqHjvTvfDZTdszv mGrUjPAmn0Nfz2RFh44gr5oHprtRa/ragrttF2UCa6YY4KUcyIcXw7kzRRedGYo2 WXUBLYhl54nUzqTpk5DwLnArA5X2YuKXm4dVOOF14bxlkotY5Ylp5gIo4+uxmdAT LxB52oC7zM22IeOJdnEUaH2Q/Y+G/+y1bSqs8WRfo4v5sUwIzBB2Y6bzG9DoqhsP wLA5lxG5Z2S+ou5tMU79stpD+60DuqiYwDJbdYmV6T2CD9SImCN0bHNOr7rytEER LjPmGuOojWTrbcrUXHR1dUDez0K6b9N0s5WFz05LAss/corNG0ti+Pcl/FNeMYNO 9FkSRiYL+hGw =wrdO -----END PGP SIGNATURE-----