-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 05 Sep 2022 14:01:03 +1000 Source: exif Architecture: source Version: 0.6.22-3 Distribution: unstable Urgency: medium Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Hugh McMaster <hugh.mcmaster@outlook.com> Closes: 1018814 Changes: exif (0.6.22-3) unstable; urgency=medium . * debian/control: Raise Standards-Version to 4.6.1 (no changes needed). * debian/copyright: Update for 2022. * debian/gbp.conf: Use DEP-14 branch naming; require signed tags. * debian/patches: + Add patch for CVE-2021-27815 (Closes: #1018814). + Prevent NULL pointer dereference with strncpy() in exif/actions.c. Thanks to Aron Xu for forwarding the upstream patch. Checksums-Sha1: 712e5c80e38b7e2d3cf303c2c20ebe3520623673 2006 exif_0.6.22-3.dsc cdb0fdb98cc06397ba5d94fb980100cffd8975d8 7672 exif_0.6.22-3.debian.tar.xz 116a5cb3f6ad24a25a6e1cf47731c51b915460fe 6257 exif_0.6.22-3_amd64.buildinfo Checksums-Sha256: 6db3523dbf4bc7fb8fd75119709e5be58ddd9d1f1bbdcefba13526df6f880439 2006 exif_0.6.22-3.dsc 974c04c40e8c7832fa28b56eacba7a2d10204fb2d11937bbc87e3b4c98037c2e 7672 exif_0.6.22-3.debian.tar.xz 5165e1620d7108aaa238d89220a639ff2c3b166ce06e0ecb1c3089ba9395c6f9 6257 exif_0.6.22-3_amd64.buildinfo Files: 9d9a731e850db367941c0fdae73a565d 2006 graphics optional exif_0.6.22-3.dsc 968ee6cdebf4012064710a30aac7418e 7672 graphics optional exif_0.6.22-3.debian.tar.xz a6a91f2504d5aa8b0aa32d55e5ea3cf7 6257 graphics optional exif_0.6.22-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJOBAEBCgA4FiEEOiCBPKV5RoaMUVIRWsYQdMXoG8QFAmMWnVQaHGh1Z2gubWNt YXN0ZXJAb3V0bG9vay5jb20ACgkQWsYQdMXoG8SIsBAAvYqeqXZawdoxPhzrsu5s 0pV9O9u6GBrxXeAs6vs7iU18lDWf7n5JR+JcB+CkfJbQ03Uq475EX5C3xDG23UhO 2Ko64LaueTZfWD/2g6TTPvRqS4dsxNSnMbFlxryUeeEWKTOo6wr3d4Lq1X7smZiy FlAO5pQL4kajR/zyTXustzTz2cuOOhQ08HqlaOQdsZ62lGJYQc6GDuUj4QmFAMjR 6iphvBxEwHE5NzbwjcSI3c+VBxfA5lyLiMsw2T8RUCLrGg0KmGHuv+9YmvrpRf8U tCvBudOczG+2AdbTBb803rAO/g0tfXUbq4o33K228n/6FDrLEupEhAauDbp1oHpb /66jWCLQ/bY5Qi3Yv8kJZlek48pwZlsh8nH6IfqXWmdzB7kYB4RQ8AUzVBCRV0sA tfo3JAVZRWkbJK/g9LInq6pWCRRHH8aXmIZFtPDs+O3AEBaiS644ghPzTl2qrRIL 1hcq3FQRCtOkG1QRTKbhWjScWIsios9ke866PJ8R+4nMAwYhTfv3TWMFFnfMKgRv y39FHzA6tjScebGTRq2LnwUqx6/7kKgNE3eD7LDo2EgkSB4plk/rLJg4WwVpVGtB 6LPbKH8pUu1wV+KzPJfKaALYHc8gfkklPgMaiDB3So5tO8GIrewno//ElYoKnfO1 i9w+CzxX1kyTd9UisPRNeTw= =XDA+ -----END PGP SIGNATURE-----