-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 May 2022 14:49:59 CEST Source: pngcheck Binary: pngcheck Architecture: source Version: 2.3.0-7+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Jari Aalto <jari.aalto@cante.net> Changed-By: Markus Koschany <apo@debian.org> Description: pngcheck - print info and check PNG, JNG and MNG files Checksums-Sha1: 554561ac1f239debb05a816447137de3621201d9 2037 pngcheck_2.3.0-7+deb9u1.dsc e7f1535abbf2f809e036a9a43c759eeac5e39350 59864 pngcheck_2.3.0.orig.tar.gz 0c1aa19f84de37b42f09e2297ccbe5c70e826a17 7216 pngcheck_2.3.0-7+deb9u1.debian.tar.xz 6dfa526a5411d603c215ded3e70f65f0d8edd0cf 6389 pngcheck_2.3.0-7+deb9u1_amd64.buildinfo Checksums-Sha256: a2d9c4e62fc1c5a7e5a40a8dbcea23b2ce03144300b995319419b9be1d317f23 2037 pngcheck_2.3.0-7+deb9u1.dsc 77f0a039ac64df55fbd06af6f872fdbad4f639d009bbb5cd5cbe4db25690f35f 59864 pngcheck_2.3.0.orig.tar.gz 1b9be3e9b18d1d686b19a17ca41d65b70f72e1b2f030d9f0e1118803d19baf56 7216 pngcheck_2.3.0-7+deb9u1.debian.tar.xz 457a60e2495295ea8e17de63bd03dcce3e71bc954521db0b00a2e2e95c7f5eb4 6389 pngcheck_2.3.0-7+deb9u1_amd64.buildinfo Changes: pngcheck (2.3.0-7+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2020-27818: A flaw was found in the check_chunk_name() function of pngcheck. This flaw allows an attacker who can pass a malicious file to be processed by pngcheck to cause a temporary denial of service. Files: 39433608b42e39922e291ce047227902 2037 graphics optional pngcheck_2.3.0-7+deb9u1.dsc 980bd6d9a3830fdce746d7fe3c9166ee 59864 graphics optional pngcheck_2.3.0.orig.tar.gz 4ea4b74d2bb95758265c7b9abf7db32a 7216 graphics optional pngcheck_2.3.0-7+deb9u1.debian.tar.xz 6b495fb9932b08ca42916bfa9cee25ff 6389 graphics optional pngcheck_2.3.0-7+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmKTbBBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkB+IP/R87WQozfi3RTslHihqC6XrBVmgSka2c70GT l7t4uHe9kzeKBuN/F/ADAsUCo/or+Oab7PCZhLPQ0swj0Doh/3POyhKwR24b6sKD zJ21E902I/fvqyG3MJdxCxj5keP2ZtBJgjBmi3mQip0VFBTNCgY1j/cv+b2m9Uy0 b5w/fPVXQd1+vHHDpToAVz+acgsFZO/sywXUZWAvl0frUrtIlhhLZnHIxb5dQvoY 0wBpWM6LX3uxsWUWHtaQk+Q0cUcSBS+99IEiaYP3NhioLi/ZknWmY/HwcsYwPHfa J5aGF+a2dNFyyCZxKHtux2Ja/QOl9VCVysiZIZVgNaEY3U30Q7XocejR8GxRj75A czziy0HK9iNXcAO2tfuE9O5yQ+3VgPpx4JC1Ok9UfDzR0fk3dez9QKkiosWfq9HZ MB3CxIO2W3wRBGgiq0jw7IvW3/DHsP5wEjb+cODpnrcC3lpClFAKRpiN5ckj4ulp XSIJY/w1vR5aGcoGlg9lj+NSk4pE3R+rZK6NGexQ82QEi+R8byM8YT3900Nuk90z Ra0tCBdeeeq0o9svLQIN5GtHEtxqjCqROERhY5s/NI9V/FYqkZ3MWVQ3T+6A7lnb KaCvaw2MVsVvdwHtCoBZSBxYobj2JY1wg+FNDrI+YFkI6X3viM7ywjmyz6roZ3Dh ytNt0DNW =w0sU -----END PGP SIGNATURE-----
