-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 Jul 2020 00:09:36 +0200 Source: libraw Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw-doc libraw20 libraw20-dbgsym Architecture: source amd64 all Version: 0.20.0-1 Distribution: experimental Urgency: medium Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Matteo F. Vescovi <mfv@debian.org> Description: libraw-bin - raw image decoder library (tools) libraw-dev - raw image decoder library (development files) libraw-doc - raw image decoder library (documentation) libraw20 - raw image decoder library Closes: 954886 Changes: libraw (0.20.0-1) experimental; urgency=medium . [ Matteo F. Vescovi ] * New upstream release This release fixes CVE-2020-15503: | LibRaw before 0.20-RC1 lacks a thumbnail size range check. | This affects decoders/unpack_thumb.cpp, | postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. | For example, | malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs | without validating T.tlength. * debian/: SONAME bump 19 -> 20 * debian/control: - debhelper bump 12 -> 13 - S-V bump 4.4.0 -> 4.5.0 (no changes needed) - RRR set * debian/tests/smoketest: path adapted * debian/copyright: entries for unused files and licenses removed * debian/rules: drop useless files installation * debian/libraw20.symbols: missing and new symbols added . [ Sebastien Bacher ] * debian/tests/build: use the correct compiler for autopkgtest cross-testing. (Closes: #954886) Checksums-Sha1: 5f12feee60635e82b920c1b568ed4b1eb700b1fe 2339 libraw_0.20.0-1.dsc ec9b5e9db38e713dbd06eab6a35999d39fb70187 518515 libraw_0.20.0.orig.tar.gz 982d0d78d1dbf4d7bddd5b96450336babb91430a 22664 libraw_0.20.0-1.debian.tar.xz 7fc1cb530313c9e76080bd714f4cf8a0a3015f5f 167564 libraw-bin-dbgsym_0.20.0-1_amd64.deb 8b926bc31d807a49307640a22b608bc3322a4501 92404 libraw-bin_0.20.0-1_amd64.deb d9b2fd213124d68a81566e4972ce769ae1259e9e 394552 libraw-dev_0.20.0-1_amd64.deb 8c1ff7116f952c17e13778ff0993d9744010ca2e 89404 libraw-doc_0.20.0-1_all.deb 606558c4f78eea9a93094f6669ebae979a4fdb05 734816 libraw20-dbgsym_0.20.0-1_amd64.deb 3e485c28543c8eea90fe639e419b3af82136668d 349612 libraw20_0.20.0-1_amd64.deb 6a6fbcd1f9017d5308864fc505a44fb3870534e5 7128 libraw_0.20.0-1_amd64.buildinfo Checksums-Sha256: aceb7b2d5fd3d55570d163b507e05cd5e40c057c9b66f07c2619509fb7f9c635 2339 libraw_0.20.0-1.dsc ad5b5a28828c5c4c86a77fb64aee83d2d2c064c319482b87b45eb9ac8b1f6028 518515 libraw_0.20.0.orig.tar.gz 3b4dfd45eacc1a5f105c897d494690b8996fa79dfd560d18ed116a7d714d6931 22664 libraw_0.20.0-1.debian.tar.xz fdd017bc10f23772dbcddf56ed6f6e8c35a62279cdd53f3c7b26f425c0510a64 167564 libraw-bin-dbgsym_0.20.0-1_amd64.deb 04b496d04522d7242d8198981b9aef3c2041e8310100e45f9b4743f121c1a21d 92404 libraw-bin_0.20.0-1_amd64.deb 156160aa1070efda764246d62200a3be2962e58978f8cd1b8997a32426b76679 394552 libraw-dev_0.20.0-1_amd64.deb 7b985b70ccc7d872cdfd84b8d0cb423fd1d565e87eac844d73b784d4452044a4 89404 libraw-doc_0.20.0-1_all.deb f33daf82d2ac2df34b17c2ebe02b909c2e73ad0f7c9a3abe3d6f45977d47bdde 734816 libraw20-dbgsym_0.20.0-1_amd64.deb 4f8cdda8b05b82fc51a1ff40a48285fdda73bf8f45020c4071cd5f041db507fb 349612 libraw20_0.20.0-1_amd64.deb 0dce29b656e11bcd93fd0563dedd62d28b6c576a98a1226831909d35ba44b10b 7128 libraw_0.20.0-1_amd64.buildinfo Files: 53de2a48960bc6048ccbaadce5d65cd8 2339 libs optional libraw_0.20.0-1.dsc 00ceab1bcc4be9a95a21f4f27435e3bf 518515 libs optional libraw_0.20.0.orig.tar.gz e687c3ea75b49f71040b9a858491e129 22664 libs optional libraw_0.20.0-1.debian.tar.xz 30451a0a022571074c931ad152586902 167564 debug optional libraw-bin-dbgsym_0.20.0-1_amd64.deb b27dfa9811f1e80e39165876b5cbc716 92404 graphics optional libraw-bin_0.20.0-1_amd64.deb bc2342e66930497dc080f44c9f1b0cb8 394552 libdevel optional libraw-dev_0.20.0-1_amd64.deb 0e6eaefed41f92a8a2d487c6ef98e772 89404 doc optional libraw-doc_0.20.0-1_all.deb 9168698455b6bca73dfc6672a4eb86bc 734816 debug optional libraw20-dbgsym_0.20.0-1_amd64.deb 0c50425fe33a675b3d8bf6b75bebba5c 349612 libs optional libraw20_0.20.0-1_amd64.deb 78fd4e1880afe816416ca3c18846a7a2 7128 libs optional libraw_0.20.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- Comment: Debian powered! iQKTBAEBCgB9FiEE890J+NqH0d9QRsmbBhL0lE7NzVoFAl8h9OBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEYz REQwOUY4REE4N0QxREY1MDQ2Qzk5QjA2MTJGNDk0NEVDRENENUEACgkQBhL0lE7N zVrTfA/9FHEUnAhfpoB8DCYi86hRy5fEp1Om4FTCZH+aUrbLnInngoa74gfyEaoD ddfwC/o0O5WxhDEIHXOw4stVE3K9IKSdkc2MOPKY6XNpFjSVOkmq1HkuCNVRaTXZ eS7d14WmjMMddOfjUh7kugPsdW2+GVUfMNBcm2t+0MSbfqiwoxXa22fn67hSoMpn 6k17sPKWHPbWJy4fVlRFYvaNUEVWLv2jYFv+k9wYPmp1R4Q90ZkeeRDaK62DULfb m/fPuh3DwWelWKPDJ/2yV57P/0xsp8F1LHODlBlfaQDfM39UozS9kJNIQSZ3zdlC CPylkP1gD4sCZHW/baQ3SNQSl86Xr4HYDkmu+xDZRVkTwlWuYljraYQN1ZqNmVnj V7uSXIZF5JmWXCO1gQnpHLunon+cWabcnJC0D7q9XS4KsD67JIDPmGLwGsoqkw0Z uLeJBCvrb7V6GZy3GJPksKP1pxDYvhm9sBVpdbpp4G0rBWTlp/lyU/Hbc26vkmGZ i2BCU1kDS+GKNx7qbsXx5ap9LoM9bL+aXMk/SsghL/Qn4Almnwh8g7pMMU3LSPXF +UACE2h6sMbVOzOQLHYlWV2MkCUNkMtijJDFcYJprfxuX7l1QBaX2e0gWrb+C8Ap ujEcIwq4FBesVdUDD5ubK4xIXg24BdPM7QmsKxmzlECSdT1C+xY= =X9uj -----END PGP SIGNATURE-----
