-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 21 May 2020 11:26:42 +0200 Source: libexif Architecture: source Version: 0.6.21-5.1+deb10u2 Distribution: buster Urgency: medium Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 960199 Changes: libexif (0.6.21-5.1+deb10u2) buster; urgency=medium . [ Mike Gabriel ] * Sponsored upload. * debian/patches: Trivial rebase of various patches. . [ Hugh McMaster ] * Team upload. * Add upstream patches to fix two security issues: - cve-2020-12767.patch: Prevent some possible division-by-zero errors in exif_entry_get_value() (CVE-2020-12767) (Closes: #960199). - cve-2020-0093.patch: Prevent read buffer overflow (CVE-2020-0093). Checksums-Sha1: 849fbb11d9d0d2c1a211dfc72dee386db59aa667 2178 libexif_0.6.21-5.1+deb10u2.dsc ff1bf3c05ac6ff85f9a90973b698426cfdba5a76 14576 libexif_0.6.21-5.1+deb10u2.debian.tar.xz a004fcf9a45387ff0c1e6b1d1ad5ac0e3824c583 8019 libexif_0.6.21-5.1+deb10u2_source.buildinfo Checksums-Sha256: c99723cab60f58e661186298d792b1acd840c926dbd36d5dc1f12ed1345962b0 2178 libexif_0.6.21-5.1+deb10u2.dsc e917f7c169ea9c416be7a113895b79c6623c0cdfaa2880a53bb5f0f9f9798f02 14576 libexif_0.6.21-5.1+deb10u2.debian.tar.xz 6d438fdda7aa82d2531203f671a36d829e3759471d042aede18cbcb761c6d422 8019 libexif_0.6.21-5.1+deb10u2_source.buildinfo Files: 25be56a747499322bdea766ae731aeab 2178 libs optional libexif_0.6.21-5.1+deb10u2.dsc e6dde630add0f5406006f1ed6b94d3b1 14576 libs optional libexif_0.6.21-5.1+deb10u2.debian.tar.xz 97f3d4905134d47e18217fb1a623b3b6 8019 libs optional libexif_0.6.21-5.1+deb10u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl7GSecVHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxqPsP/3Bbp3mH6R1kwP5bmlGe/Q3NQ8JJ 17TNArPEDjj45M8g3IJ4HE+5Hv11D54uMBZ2ws5p+OlsSk4FWoJGzbnkt6737TNq v1Z063HL/grXQ3fpuBSsoDH6n9HXm2T5/3cvz//iXYGAtI/jc+1By3trC+zWPr0Y SjZzBRKxr6YWKaJJyLXFpU3O1iGnIW/9AgvZJTZma3FPcd/41vBz88waTwRRbiK2 GCjs6StRhe2JFY6XfKcxJZqAI30dB+aeOBV5NoWdMR8o5NxHHt031OF1ykZUdRSJ DLtOBRh37XF5HBH8gWNsr0r56Z1k6HhDzdXF4CLhA6YFFBjw2gvNWHCQ3UToHFCR dBFlj6hmWSR90dP0/dYYdr+Z6zEp9qNcMixgzkr+tKQuvRVdZvJrtb1geK49iNtv 3NjxEFG0EXzOt5xES54t7JUQkdj5UfQWtCAhJaHeKrRs5SPE4jb/KquA2XMc/H2v JHKCyZ8lFLJLz9NR0pyTWv7einjHHww05WEZ19CbRjVAmwRwg4TaJj8g5wEhQHEs RXWvuelx06itUADSLaZRcsxfTwbUJwTD6LFQOKGrtBy7NylbpcDhz33NoEiM1WA5 O0RPeH34d1p9nnXy7Bh/JIgVIZvhYdOGI6osVK3gTZfA1vFg9IlrzW7yn6uH5ae5 6Hzrzu1kB37JDvTB =KZww -----END PGP SIGNATURE-----
