-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Jun 2024 23:04:36 +0200 Source: gdk-pixbuf Architecture: source Version: 2.42.10+dfsg-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1071265 Changes: gdk-pixbuf (2.42.10+dfsg-1+deb12u1) bookworm; urgency=medium . * ANI: Reject files with multiple anih chunks (CVE-2022-48622) (Closes: #1071265) * ANI: Reject files with multiple INAM or IART chunks * ANI: Validate anih chunk size Checksums-Sha1: 7f4431270e9826b5750b6a46933b22fb128ce976 3328 gdk-pixbuf_2.42.10+dfsg-1+deb12u1.dsc 51a597a12c66c5677f032e491042b465bc792de1 22156 gdk-pixbuf_2.42.10+dfsg-1+deb12u1.debian.tar.xz ad7a1963c42ec4d8c0ad1dc077e811a98f545d5a 7233 gdk-pixbuf_2.42.10+dfsg-1+deb12u1_source.buildinfo Checksums-Sha256: 61d9a589c47389c3668d0e0e00b578b4bd362e820ccf0753c44912940a466f2b 3328 gdk-pixbuf_2.42.10+dfsg-1+deb12u1.dsc 91b7d1795ffedc62c832c4a7cd4d425c39117372bf4bd69720b5c7d8dd93605e 22156 gdk-pixbuf_2.42.10+dfsg-1+deb12u1.debian.tar.xz 1ab391bedf15643656fb26af026c447943f68db120837738aedb3fc31df229bb 7233 gdk-pixbuf_2.42.10+dfsg-1+deb12u1_source.buildinfo Files: f24a0e5068051d09aeacc97589a8a89a 3328 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u1.dsc 21ef15fa34c4c6c97c957c499d652501 22156 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u1.debian.tar.xz b98af29cabe438c24573f9d5113c839c 7233 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmZrx9RfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ENi0P/jYTMdULHzaBIMP2azoKR+IPg217faOB A1joR7olHCPiocfl/2UjwBxMHoAbIH2gJ/fcUnL+d+lw/8ImnD3PP8nxpV0LKX0a dGG+xVFcocKEvMXpGjbriH1EgQKDasa+A/BoOe+315hAfNzPpe75EU1uOIp4daFI zOHfBQIKlR6x9FPcTArIzeCWQ3nFhopC+skRf+xW/OvnZIbac6N2d8Qgofrzotwi 8PZxSphLnvqwRfLumhXpCnGweeFyTl6w7SBtmmmorZyQfBozxtnN+p45v48bNJtc KNUCJatkeG8UUqUdaNs1CH2Eb+UfulvvIyfxp5lDCDqB4TJUWY5zBUnBBJvlRskv CLqPamhQAjyKcdBRfJYLPUFzadSpDoviKFqdUddR7LEUbBZhIEO0zi+fBNsaiWGS EOXbJXMZnZpEAd7N185k0rubpyRGfkDMk1nKnDGfDgL4MRGfckE7+sDLy4LKlDvd SrqhzunABLT9MoYYI2yhb5PVimJkseE1Dz0osBD8+sRY/dOnf0WsQOA2rztUYD1l abe4MqWHCd8HmGgkvvNeto5BfEG8kxjbUhh8Fik+j0baiJPm9sGqo2kwpKF8Y/ss lWGY8+wn8Nys4Dam31pLLKyv1HphiQ6YeoUbol+JI36Zzdglg9lweGYVq4tEkOWB Nq3s+nXeSidW =pipz -----END PGP SIGNATURE-----
