-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 18 Sep 2021 18:41:25 +0530 Source: tiff Architecture: source Version: 4.0.8-2+deb9u7 Distribution: stretch-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Changes: tiff (4.0.8-2+deb9u7) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Add patch so that LogLuvSetupEncode() error must return 0. (Fixes: CVE-2020-19144) * Add patch to fix invertImage() for bps 2 and 4. (Fixes: CVE-2020-19131) Checksums-Sha1: c78820a62685a6a8a004a6e208f83d09a2a9d395 2214 tiff_4.0.8-2+deb9u7.dsc 88717c97480a7976c94d23b6d9ed4ac74715267f 2065574 tiff_4.0.8.orig.tar.gz 0d09bc59871d3a9f35fcc02d867d737669f38a04 38912 tiff_4.0.8-2+deb9u7.debian.tar.xz adabcab1284dda685722c1b569e16cee19ee6fa2 6143 tiff_4.0.8-2+deb9u7_source.buildinfo Checksums-Sha256: b5be558cde48e31e02f020ee857c4c186f14ea6704bf51de05a58ca862e50023 2214 tiff_4.0.8-2+deb9u7.dsc 59d7a5a8ccd92059913f246877db95a2918e6c04fb9d43fd74e5c3390dac2910 2065574 tiff_4.0.8.orig.tar.gz 792512a24e434bd349813bccf7443ef7da1e780bde2f6920eb789fb06825e166 38912 tiff_4.0.8-2+deb9u7.debian.tar.xz 1fb39d99453d7b11e589f41e1ee619d429c018697005ef4609e9c405dcb0891f 6143 tiff_4.0.8-2+deb9u7_source.buildinfo Files: 175890f6e3d10c0d05d003de7ea83a67 2214 libs optional tiff_4.0.8-2+deb9u7.dsc 2a7d1c1318416ddf36d5f6fa4600069b 2065574 libs optional tiff_4.0.8.orig.tar.gz 46ae6abd5ed4ae315625efeb419439f5 38912 libs optional tiff_4.0.8-2+deb9u7.debian.tar.xz 6d528f87409d4e5a8a85bf025d3026d4 6143 libs optional tiff_4.0.8-2+deb9u7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmFYXcsTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlil0D/9vxo2Mmozya9GUB46fwGfEHJrrO3Pw UNd93pAliH8t8B08mtYuoSTPgD3gVlwZrx+eeVfWyPXuVZqjbrHAp8ujZwjfgXGH KFsiUArSYvkC2TlbOSRMu9YHvIhgYGcdkAouOCaCUY8ojTc/IDZB1Ug+PtHCs9Zk SoUZNfG4aDRSKLtQWrb+Vw2/656zyPj+Iq5/IVb1qnCUa0/z3iLvbrf1FohaR8sr 2Yj8/yMf2dpk/7ej71DAsqm9gghu4oiKW6W1Jhtko4WX0AedC+i2fErzsBE3UNC0 bOcdh5EDY9SwfWdGvwN064WocsObjiqp4ULvkgBiT+iyPl6oQcgY1yGb8OXc1IRG hIP64uZin0wO65ywCvHAvfXwLJZiTUlJwZt7u2atkTaFOqHAkHG/meseGVK1+jZa RGOMruRA/PVqMpVD6Tes5z0NRqy4oegA12tp0PkbAeRK6hqv5uKcFv8FDheYlCpy APKMHfSyrNz0+huSa3WpeZvPJfX2hWosRDtWQcE0DTJCDY6mf8zk4/XciHveMOs4 l1CeIZG1rqit4Mgl1ytysOBagEngWOLJslp3AgdHbTSq2mFRkix82EUqEvwoTKsq VbnX1egk+PEpsvbtVhTBItoZ+W9QztERpMlgCQfTL5eEn3irCZexYQ08G/5O+cdZ lpgvWzsWGYf11A== =HtjP -----END PGP SIGNATURE-----