-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Aug 2021 21:03:02 +0200 Source: gthumb Architecture: source Version: 3:3.6.2-4+deb10u1 Distribution: buster Urgency: medium Maintainer: Herbert Parentes Fortes Neto <hpfn@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 948197 Changes: gthumb (3:3.6.2-4+deb10u1) buster; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2019-20326 (Closes: #948197) A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file. * additional fix in case orientation swaps width and height Checksums-Sha1: 0a464603145736b4376e170c3401fbd1b26fd130 2505 gthumb_3.6.2-4+deb10u1.dsc 02ea3f0401976c13d13ae0aba26cfee551db26f4 33568 gthumb_3.6.2-4+deb10u1.debian.tar.xz 7d757b21c0e0f4785988b6cd2b6e08564ebfa362 21090 gthumb_3.6.2-4+deb10u1_amd64.buildinfo Checksums-Sha256: 08f8fe97cc27a7fb75490923ba4d8f36ac9540d8d143d898a5c9fd5438ae21fb 2505 gthumb_3.6.2-4+deb10u1.dsc b85eb03fbf69dc9705f17558a6d815c7933d672ed77a31aeea7b558495f56398 33568 gthumb_3.6.2-4+deb10u1.debian.tar.xz 3393428009b79512dba75c2644804a542fc988a2f88d07a403d91b9ffe8100b0 21090 gthumb_3.6.2-4+deb10u1_amd64.buildinfo Files: 72c7632aad615ae243433f463896e7d1 2505 gnome optional gthumb_3.6.2-4+deb10u1.dsc 77d6224b73146378aeded5408e116339 33568 gnome optional gthumb_3.6.2-4+deb10u1.debian.tar.xz 968cc5db1fc6a159b4cf806e33d04cd6 21090 gnome optional gthumb_3.6.2-4+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmFHskhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR4gaD/9P7REV34teUqhEyMOOq+uWe0b4NpdB Duf2pty370opLGQsig3BUOPHhmJn9bjID8HPHNSseyKPhiEx1XcuxrFeze5gFn4t jcDQUyGzvBXTg9JaM4Bz4jLPu7z+ofD/ed33aoJcdGcpRTz3mehrFqk1Yls55f8/ r2bYb0talJsptcLPC4T0Vve8FKSnrNv5s2aIucigGfOJT3WjlaQHRiUlxjKFDmuB BlOiX9Knh1zd/oDHcOv/CGke3KYRWyYONny8+8/fbkhn1Ibr2QJe8p/kNbTuZq+2 DVZG0zesxawS2XCVIHAYpsKWydai//a8yV0izhNKPNWLuRCr0xTXOXguU9mJvxQU rWwH/oqVOAXWrIgLXlkN808VXYS+wguQjyZtb88Ixc7YB4aBeDz6iAURB1kAaTTd rD19ZKDNmtCRkYYufKGhMSPl+ZKmnuk+CGeUPtNyunBd9jA4qYeDNL24EDNQYA1/ Aa5Pzo5kf/6IKckF0Byu5FPNiY2DOR99vZKRCowwRUK2ETrAoDl0Mqs9eAObdc+1 Y8nwDIoEU0LTFxV2v6dJ9aLBtkmFZID7aLR1DuFln32gWuKpxNxBt0XEyDbmRBaO jgMYE1JFXrfUehI1uWIMU4TXJOewyeW38C6HZsHf59thY8i2HF/TD4OTPS2S//qS lTeaZKqYUCtGIg== =W0MM -----END PGP SIGNATURE-----
