-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 29 Aug 2021 23:12:52 +0530 Source: exiv2 Architecture: source Version: 0.25-3.1+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Closes: 950183 986888 987277 991705 991706 Changes: exiv2 (0.25-3.1+deb9u3) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * CVE-2021-31291 (Closes: #991705) The fix for CVE-2021-31291 also required to backport a few patches that fix some (harmless) CVEs alongside: - CVE-2019-20421 (Closes: #950183) - CVE-2021-3482 (Closes: #986888) - CVE-2021-29457 (Closes: #987277) - CVE-2021-29473 (Closes: #991705) * CVE-2021-31292 (Closes: #991706) Checksums-Sha1: 8015507131afcc29ae70b99c8ec61c40d6d727ab 2333 exiv2_0.25-3.1+deb9u3.dsc adb8ffe63916e7c27bda9792e690d1330ec7273d 5434325 exiv2_0.25.orig.tar.gz 698186eecd42872e3479f045c50d61a578b7a91a 30632 exiv2_0.25-3.1+deb9u3.debian.tar.xz 527231169d548b1564f6bd821052ac807e391ded 6196 exiv2_0.25-3.1+deb9u3_source.buildinfo Checksums-Sha256: 1681d8b63c10edc3eb823e82998b9ff27ac3e6bae847cf919c981ce7e98a4025 2333 exiv2_0.25-3.1+deb9u3.dsc c80bfc778a15fdb06f71265db2c3d49d8493c382e516cb99b8c9f9cbde36efa4 5434325 exiv2_0.25.orig.tar.gz f95c1970e2fec29ec8492a835bc48b13dbdff19470ddd44be98483486cf65ff3 30632 exiv2_0.25-3.1+deb9u3.debian.tar.xz 8e0884ddd75234d76eda0904964c7d87e644cf29ba53a1b7ffef915e1efe4787 6196 exiv2_0.25-3.1+deb9u3_source.buildinfo Files: d0b03fe9721d0b3802c27410e5775a5c 2333 graphics optional exiv2_0.25-3.1+deb9u3.dsc 258d4831b30f75a01e0234065c6c2806 5434325 graphics optional exiv2_0.25.orig.tar.gz 141003a1cff4d23bc57aed48042bcd62 30632 graphics optional exiv2_0.25-3.1+deb9u3.debian.tar.xz de84e859c6af4d156f894b95d0d4a5a4 6196 graphics optional exiv2_0.25-3.1+deb9u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmErygMTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLliN2D/wM50r3PBbwXXzE5BwonNguLO4fJB6A W220sax+11/Nz/WgmFvMVocN77SqbydBkuDghgxtAmJCssgPhXbQdAtiqbSMjKxD uj7iDOaqszxO4vVb4QvPoHNAqxIdnbTba9eKCg45HZT7IDVSA/3lJlqfkNvxRb9K JNuNkenc0wSEundj3UBwTMW/LLW7iKi/qevUMjh9dy77/IzmBoch+Fsnb/0+ZMGR inOQuhEMJ7KNXF/tDzS3vlZN/eVIBB5C4pIKQ/3IN/nvacRmcyiNZUlAvG+L8raB Ww445hf3CdPrw9qcNjm2cvaab9ioNvKI7cbLbuGrIBrTko8wGnssYiHOr1+FTZdd 29pKmpjxfd1mWOVhpRjAe1xwE2TnimcKKCOxW1ei80i6Y8NeZ9qdL8Ac4IVm/rcF bJ4AkDH0z1ArwMp1RioXMEpd0eYhtS9Pc57NaFYvJrrcqC3Yit8kfedZ+pkvn55Y t8CIdChPmPIGNPN3ZLtyrGYs24Wvd4m9Yk5TEuQe+v1yzb00xA/TBgLzEHZGjchT Q9gxUMEyX3/FaAyoonq6II0uGcGhRs0Y3x2xplNdRkL26ZlpZyVL6HMZX9EWIsld AFJg2c117TvpbJG5di0Pnx0YQf6AxO2mdMWJbC6N9+Ar61P5qLElJf0e4kkSQK7l QOZBI9tSgi1Vxw== =eGhx -----END PGP SIGNATURE-----
