-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 4 Feb 2022 14:20:42 CET Source: apng2gif Binary: apng2gif Architecture: source Version: 1.8-0.1~deb9u1 Distribution: stretch-security Urgency: high Maintainer: Jari Aalto <jari.aalto@cante.net> Changed-By: Markus Koschany <apo@debian.org> Description: apng2gif - tool for converting APNG images to animated GIF format Checksums-Sha1: 2dd9eed34413eb40110ac66f6231aadd18f8987a 2065 apng2gif_1.8-0.1~deb9u1.dsc f1f24e5ece9b6880334ba218c5ff7dadf91aedda 437914 apng2gif_1.8.orig.tar.gz dbf266308a6036c1793967beca91aa40836dc524 6912 apng2gif_1.8-0.1~deb9u1.debian.tar.xz 2cf95a916fb7204fa52be23077d4794543435d15 6428 apng2gif_1.8-0.1~deb9u1_amd64.buildinfo Checksums-Sha256: 1acbda5033d3721564f22978f7e4a0cabcc9ffc1b5469609c496ba916e0069b3 2065 apng2gif_1.8-0.1~deb9u1.dsc 4d47a2c0e6656bbc5afeecccc62b22f885a6b0434944bd52824126a156959649 437914 apng2gif_1.8.orig.tar.gz 103b7763b7df93b52318cba2ff8d1ea2d606fb7d134565f237803d4f8a0039ae 6912 apng2gif_1.8-0.1~deb9u1.debian.tar.xz fc43a584c772fbf3a6bde48f065ba9b19912136e0626663685cf12f1376bf344 6428 apng2gif_1.8-0.1~deb9u1_amd64.buildinfo Changes: apng2gif (1.8-0.1~deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Backport version 1.8 and fix CVE-2017-6960, CVE-2017-6961 and CVE-2017-6962. Imroper sanitization of user input can result in denial of service (application crash) or possible execution of arbitrary code if a malformed image file is processed. Files: 1386d68be5ed5346ac4206123ea02185 2065 graphics optional apng2gif_1.8-0.1~deb9u1.dsc 4cf980234840ce2aa856cf328c644e85 437914 graphics optional apng2gif_1.8.orig.tar.gz 42ab6c617f2ad24cc877b3c53eb1e5df 6912 graphics optional apng2gif_1.8-0.1~deb9u1.debian.tar.xz f982012a09d64aef8112aa3e6b2d8d5a 6428 graphics optional apng2gif_1.8-0.1~deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmH9KFdfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkD1wP/jnVyl8u7jv9nxZvxAUvEQ205fAsfM+Adjhq NSF0GXwnuPJhHv73YAD1akDiO9gz08dyDR62AFWOd96M1BqyfCcLhgKtU2yhBAB3 r17mfPNUn0tNONZinb2jJV5FsVlXjm2FOF2KbHhniB+/rVWW4vNUVnaozK5rdFBX /T1LXqZXGFS0ICxx++FSgl1B7/i6fYaPFudM3yy5u63nRv/9znDqt3/VkTxx5MrZ xskJZ4HS/7GvS+IGsjxDUwTSVPyMsAla3ugJNM1dVAt9Zx8o+0LMTy/Uhs3ZCOg1 sCcQlVFNn4kDJ6MrVwL0lJzlL7bpklAlgXX6XR41mlBOJhGOvekoXr8biZDhX4RX vYl3vRfi4g0SkKh7pT/LzUQcVdL/JhYecvJxn5sBX8v1IQJSoBG5KJI2PJ15GpLG vxKkxD9u/liMRVu/hilKW3KLwjJrqvWf1c18GYeaay8Xi8o+a0UxWaUnkvh/l3yY buXrQ6feyecWuKPiGDF51vJC9KB2P2ICcscLTfZmqWufueRRI1Ym0Cs+qNiVyLjo BasLBDlAjc2Y6SrHJ2V0A4dM3uEVwMiYN/gYS6OAwMu93iwjaAWGbEHVkNCKLFc8 1JTAL20zkeKAukC93dUh5jyAirI47YmEdO01Jgj7NVckVzUVlqpQ73tJZ2XxXU9k dLYBggk1 =aPH4 -----END PGP SIGNATURE-----