-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Nov 2020 23:06:39 +0200 Source: vips Binary: libvips42 libvips-dev libvips-tools python-vipscc libvips-doc gir1.2-vips-8.0 Architecture: source Version: 8.4.5-1+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: gir1.2-vips-8.0 - GObject introspection data for VIPS libvips-dev - image processing system good for very large ones (dev) libvips-doc - image processing system good for very large ones (doc) libvips-tools - image processing system good for very large ones (tools) libvips42 - image processing system good for very large ones python-vipscc - image processing system good for very large ones (tools) Changes: vips (8.4.5-1+deb9u2) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2020-20739: An uninitialized variable may cause the leakage of remote server path or stack address. Checksums-Sha1: 1e528f06f3fa54ac9bcd7b8f9b199f9b50c7f62b 2707 vips_8.4.5-1+deb9u2.dsc c14cedb175836f6f877689d1cbf9689d54aa9b1e 11527549 vips_8.4.5.orig.tar.gz e703eaa086a49717701b73e870f8c3db4e83fb70 11848 vips_8.4.5-1+deb9u2.debian.tar.xz Checksums-Sha256: b7771984e688fefa6ace2f6580e62fc1b78367250349221b18ea3a148405b86f 2707 vips_8.4.5-1+deb9u2.dsc 0af73a51f53250ca240a683ba0d652003744382b78d8a10152c8f1bd019897fd 11527549 vips_8.4.5.orig.tar.gz 1a0a8bc4e038cdbd7ddc65ccd810e1852969acf2aa32878fca87e94b4938801f 11848 vips_8.4.5-1+deb9u2.debian.tar.xz Files: 35a04f06a3b35f49c3f90f93158f4b60 2707 libs optional vips_8.4.5-1+deb9u2.dsc 38347ebab211722e436e124ea067da16 11527549 libs optional vips_8.4.5.orig.tar.gz 3f02a8f3e821e46ab44185e5c88d0e8a 11848 libs optional vips_8.4.5-1+deb9u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAl/FYrUACgkQiNJCh6LY mLHUXw//ZI+N6W1NO9da0u24q/NXWj6C6BomyV4ESRKTIRUiaPMY/KDFDIEYLLHI NJwFgcQEMXAUq7oMGLGvyxLMnEx0MVchGCV0Tk3tZCmEZxy2Kq4uXbqISENClUrh rMbMPzwaJ1PIQI3CtzMHqu/ETZc4xosdOt6I1kvCSr2Hn72+cA9mJQ8pfCEXbR6K 7J88ROUv6/pfJY4NeyLfOKrMh8+ZRKlJNRPPmrxGuoxrh6+IS2Wi7QM54liFUJF3 xz24KbUlFQe2bs7jbw4qcJJ9Ke8PCib7ipMfnYD35vTOuLO6HEw7c5mv09JGQK6b AspLFt+rnXNYoS4bHjj86Z6FzneLyE1nQkJoI4GuC6Ge70dKMDA8SedTVlvPSeLn MFW1EiBvxPiGidNKAmnU0eyiHYVKZ6fq8tq5vYWcGREvMjiyD2+oCJNIbSC0N7g5 CRBUzvK/IS0dW6hg2QDRWrecJOi/7mR+JP7BhIUUyMeDJz51UC0uJoEJAb5uou8C Zt6x3XMd9xZiQU/Bbma3vXl/j9qROzrsPQpEfNLmKnjZjOGvslzArSDobckZWhtc bM4wnezaCRywFkD1SoonTD/G4iNMX9ejvuyc2/Bsd8k0+o6vRtn4q9yxhdB3uRqz p5h2rqW8EOhBvpv0YS2aA/jxE9X1gAS+8QjItQgh00XGC3D1SEs= =qcav -----END PGP SIGNATURE-----
