-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 08 Aug 2020 21:29:46 +0530 Source: pillow Binary: python-pil python-pil-dbg python-pil.imagetk python-pil.imagetk-dbg python3-pil python3-pil-dbg python3-pil.imagetk python3-pil.imagetk-dbg python-pil-doc python-imaging Architecture: source all amd64 Version: 4.0.0-4+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Matthias Klose <doko@debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Description: python-imaging - Python Imaging Library compatibility layer python-pil - Python Imaging Library (Pillow fork) python-pil-dbg - Python Imaging Library (debug extension) python-pil-doc - Examples for the Python Imaging Library python-pil.imagetk - Python Imaging Library - ImageTk Module (Pillow fork) python-pil.imagetk-dbg - Python Imaging Library - ImageTk Module (debug extension) python3-pil - Python Imaging Library (Python3) python3-pil-dbg - Python Imaging Library (Python3 debug extension) python3-pil.imagetk - Python Imaging Library - ImageTk Module (Python3) python3-pil.imagetk-dbg - Python Imaging Library - ImageTk Module (Python3 debug extension) Changes: pillow (4.0.0-4+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch to fix multiple OOB reads in FLI decoding. (Fixes: CVE-2020-10177) Checksums-Sha1: 205924b8ff6dac95ef3a0a061516c2b0ba6b2fe4 2811 pillow_4.0.0-4+deb9u2.dsc f4b7d1211b2ca6e09e6d4ea8e91ab64f69dd1326 7854072 pillow_4.0.0.orig.tar.xz 130409d1c7e6385afa51faff9a26da50a4b7da75 47624 pillow_4.0.0-4+deb9u2.debian.tar.xz d950deaef527580eb0cf9797d7964815f50a61c2 12700 pillow_4.0.0-4+deb9u2_amd64.buildinfo 00a76cacb32c03a1d20a8a2aeab230ba967ca676 50628 python-imaging_4.0.0-4+deb9u2_all.deb bfd0fb4d2ec540181f85ef1ce5798f57d51d87b2 716098 python-pil-dbg_4.0.0-4+deb9u2_amd64.deb 3af0b360b8f0440794d273cee338eb2cf9532ee0 59432 python-pil-doc_4.0.0-4+deb9u2_all.deb 03e6d1a8527edf98240a45c03c49b06a4b2f52b5 30606 python-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb 734f2cf2b17653aa09925ad48f871247381e3972 55488 python-pil.imagetk_4.0.0-4+deb9u2_amd64.deb 21648143811dca93a3858224c80757232647e399 376674 python-pil_4.0.0-4+deb9u2_amd64.deb cbc0597ee5c939c4259fe9dcb49446859cf09e33 886922 python3-pil-dbg_4.0.0-4+deb9u2_amd64.deb 03a525756e931905c7afaa43128b5b688ca79e81 36392 python3-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb 9db6f56a5bd7401afaaeb43ab3c18395b2adc07b 55672 python3-pil.imagetk_4.0.0-4+deb9u2_amd64.deb a35411f74332af36b8526d438b3f3fff9ef5829a 377464 python3-pil_4.0.0-4+deb9u2_amd64.deb Checksums-Sha256: 650caf6107ca83908ff95a751eabf63e33d2ee0bf38b338def0274ab2c62bf59 2811 pillow_4.0.0-4+deb9u2.dsc d68b6e6777de6824b3345540038372c451021bd14ac0dd04da2d89ef88c7f870 7854072 pillow_4.0.0.orig.tar.xz d4ee179910c7df0a27ed0dc3c287ee58d01ce3fed4a2e198e5c8dcef3fb0f030 47624 pillow_4.0.0-4+deb9u2.debian.tar.xz c771f6a80ba263d2202c48ad74d93c6f9b264483dbe18d64b32389b8cbd700d1 12700 pillow_4.0.0-4+deb9u2_amd64.buildinfo d43dc8ea189ff9b6667c981ce14b1f7e84ece4cf23c45dee03c43c9e2707d099 50628 python-imaging_4.0.0-4+deb9u2_all.deb a58eca62d45446afa7a84ec518e703ecee16486647a40f3422f6852e571c723d 716098 python-pil-dbg_4.0.0-4+deb9u2_amd64.deb 8facf2700da8a57e4182632e1ff1cb59dfbea9911cd4dd79aaf395af1e0d27db 59432 python-pil-doc_4.0.0-4+deb9u2_all.deb 356ca2f317b794e9264d9823da0cce188a14f1438504554d9153595435252650 30606 python-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb acd74fc81c5436829ca0a94c78446fdf9fa2357618a9b3f32a8ea38ac7c917dc 55488 python-pil.imagetk_4.0.0-4+deb9u2_amd64.deb c287ab6920e601a04bcb3266b0c1a3daf3f7d60a099a3384276f14c80ffba77c 376674 python-pil_4.0.0-4+deb9u2_amd64.deb f0c45e630f91af7be81889b4298f98a0c07d00b6f133f06b0bca88de8f17f8f4 886922 python3-pil-dbg_4.0.0-4+deb9u2_amd64.deb 70d84fd68b03b7acee9ba108b102d52705bac1573e4ad0541a5018b5342bace4 36392 python3-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb 6cfa60eb9b75c96135b33ccdd78f09457ccc18b3666fa115a03cc77078047759 55672 python3-pil.imagetk_4.0.0-4+deb9u2_amd64.deb 367fd6183603ac7ce657551b45180373d45d6af5fadd4f41929d265810f6c582 377464 python3-pil_4.0.0-4+deb9u2_amd64.deb Files: 238bf9a7280484ded3c5504b6d0c6e28 2811 python optional pillow_4.0.0-4+deb9u2.dsc 4052cca60a7445ef1dc6d9d61522606b 7854072 python optional pillow_4.0.0.orig.tar.xz 91abdd4f8525bfd9175a44115be3d4dd 47624 python optional pillow_4.0.0-4+deb9u2.debian.tar.xz bb762ffbe617318e5616b2a0618e3e2b 12700 python optional pillow_4.0.0-4+deb9u2_amd64.buildinfo 033a27d2a07311d6f75efe030fbac65e 50628 python optional python-imaging_4.0.0-4+deb9u2_all.deb 7ef89ae80d6257babfdb989e02990e40 716098 debug extra python-pil-dbg_4.0.0-4+deb9u2_amd64.deb 849c46d6f375d641db41c8c744365cbb 59432 doc optional python-pil-doc_4.0.0-4+deb9u2_all.deb bde00446025519a39f861e1e70ccfc20 30606 debug extra python-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb f85f360d7a41fed6be7cabba6feb543c 55488 python optional python-pil.imagetk_4.0.0-4+deb9u2_amd64.deb e029e99640a211b3672e09a33c17cafc 376674 python optional python-pil_4.0.0-4+deb9u2_amd64.deb f30be9bcd270731d32931957d396e443 886922 debug extra python3-pil-dbg_4.0.0-4+deb9u2_amd64.deb 6d6fcd92b7c025c1332a984ab6ae86f4 36392 debug extra python3-pil.imagetk-dbg_4.0.0-4+deb9u2_amd64.deb 556003609101f003895a13a92ba5b28c 55672 python optional python3-pil.imagetk_4.0.0-4+deb9u2_amd64.deb 8f128e145af00d34a20c0e67652e24f1 377464 python optional python3-pil_4.0.0-4+deb9u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl8uzVMTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlmkbD/4rEngLhZPcY8HweXXg74IUDrQdwixc EZW5EI80aGtAu5kx3lQj5MZI3T1zfm4VVZKF0fAS4C/W5nE72hjbwR01WhAYMhy2 KytT7Y6PA0JZRAgotbK6Y7Tct2lKXJVQFAuXMdU3D1ei1igW7fW/mfndXQHGLq0A mwTIiBcttcvXx7AO1oha+8jWIzocXjczLxg4xDjq0nGuENuxEf/JNCxyIZjEbud3 RI++LKXzlMZs3b0eimYhvuhs96b9sxg8Fb2STcus7Vl+DODMl3UQCQZr+7pF3LmZ 9hFFhoWofoqpcNbQskKoEIEsDtA+I5HxeiMwnSlVst+7svmCUCnk7T/H2emmyhOV ywmPuKzkCGvTUPD7g/DE+nYrVh+m9Bm1M3qcCENH144nWHOvvFgZAYs6cAlClgbY QxwOFKyneszWhjtcpUsCV9l/3PVatW9/63mCChLSryNJWleh2kixkj9YKWacU4zV /FYyhU90Zc3INN0JCnFSyHuhMs4ROymYMrkiCN1IJlOJ/fm6llcEMPyziKCeOf1j yZqK1+W3IgcCpzu0V+odDyXA0ciyA7akiPhdC/PbD9rfJPayGxP7CrPkQG1KdgGo tWpIKdqTrpinedpSLSuP+rTxLLBy7djyunoOF7jSfZVcwtKykG9b4C8QgGNz6qnQ b4gXLmv5ziHsHw== =Ukjq -----END PGP SIGNATURE-----