-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 28 May 2020 14:30:17 +0200 Source: libexif Binary: libexif-dev libexif12 Architecture: source amd64 Version: 0.6.21-2+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: libexif-dev - library to parse EXIF files (development files) libexif12 - library to parse EXIF files Changes: libexif (0.6.21-2+deb8u3) jessie-security; urgency=high . [ Mike Gabriel ] * Sponsored upload by the LTS team. . [ Hugh McMaster ] * debian/patches: - Apply correct upstream patch for CVE-2018-20030. - Add upstream patches to fix multiple security issues: CVE-2020-13112, CVE-2020-13113 and CVE-2020-13114. - Rebase other patches as needed. Checksums-Sha1: f59f7f0efe46a85fc2bedd8187ff8eff1630674f 2127 libexif_0.6.21-2+deb8u3.dsc 3b61dc8f9f269505be061280853a95f10c417f5d 16048 libexif_0.6.21-2+deb8u3.debian.tar.xz 74dff3b699208736015c3a07e55ff8f8d59171b7 398690 libexif-dev_0.6.21-2+deb8u3_amd64.deb 00d0861f1ba6baf83e5ff4a1a0404abab2d3a5e6 325204 libexif12_0.6.21-2+deb8u3_amd64.deb Checksums-Sha256: 91444bea30ef0f8d0ec142096a3c8e0e9d0d5209d61209b716f4535b59afc9a8 2127 libexif_0.6.21-2+deb8u3.dsc 7c3641d06a7138175d01d0e1fdd01cea9d60a4b14f46d409f1ea5955e3aa659a 16048 libexif_0.6.21-2+deb8u3.debian.tar.xz 717a6776109d718d96b5870a99033832d900646cd449b255b7289865c27d2a60 398690 libexif-dev_0.6.21-2+deb8u3_amd64.deb 023ca0df9fdf35db13337ac943b698de9e59bdddfa3253621179676688f1e712 325204 libexif12_0.6.21-2+deb8u3_amd64.deb Files: 4111ec1d54f5381b805d7499ab803b0c 2127 libs optional libexif_0.6.21-2+deb8u3.dsc 75d021037e4601c780a4f5df87b1510c 16048 libs optional libexif_0.6.21-2+deb8u3.debian.tar.xz 4d08f331cbbd43a1acb7736a92e74769 398690 libdevel optional libexif-dev_0.6.21-2+deb8u3_amd64.deb d51c8b57e5e9965c8de4e0e800ae23be 325204 libs optional libexif12_0.6.21-2+deb8u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl7PsC4VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxtO0P/0X5Vb9UrZKSfzSDmKZrIzTppCgf qv99HCqDjkTyPMDZ3892ybUbabdsaesdID9arERSZ3VUd6wGrM1qyLaaQcd3DEfj UndloEsVVMZ9jfztQcLjmVkcC4w+Vev5JLGGWOlYbabjjoLrJMNzD/x4NTAL4ibU kPAHtUxejfL7dw/1d5xw0xbrFffj81vFxh/ef8fNMLR+M3BdbyNn6rsuk8Kn9SJ9 HD9j5NebVJS0hxlasa6M4cYTa8/NRRyXIqG4jIxz/+00riaus9pXzeiOhF1ve1GC BSURqvYUSPVJxnkV2W9vjkIh8Zo9I2Np/l3Mo1+FEDMxc1y2ny2yIBSE8pAzqxIz yKguX9AWCso5VyAb9Z3Q2vi1gdJogamh+YW5P1NeaYWZylc4ba7R//LUou/DT7Cd sjgTK3ZqxtWTjXFBHP3WOiesmxkFZuLiZG64miALFbpp/AYkC2NLLOC4VJq8ZOXa jAMk0+BkaJaqHKDSQxI10W+efytbHfKRXAc+eF1cLxqZSXvhMaARt+BKgf+rsen9 +5X5G9hj5LfJmg7S+ziDApzKZvWZ1pqS8t3OLIoIrHfmFy68Ew9WJFxZxzrhJFA6 7Cv41rMEcaEZKCc8hOFNwgA9dDj0B28IMlHWotAvpfllvQ9czzCXSlP/cIjrYhbi S2vnAguFMCJ3PMZZ =fusB -----END PGP SIGNATURE-----