-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 14 Mar 2018 14:36:25 +0100 Source: exempi Binary: exempi libexempi3 libexempi-dev Architecture: source Version: 2.4.5-1 Distribution: unstable Urgency: medium Maintainer: Michael Biebl <biebl@debian.org> Changed-By: Michael Biebl <biebl@debian.org> Description: exempi - command line tool to manipulate XMP metadata libexempi-dev - library to parse XMP metadata (Development files) libexempi3 - library to parse XMP metadata (Library) Closes: 892782 Changes: exempi (2.4.5-1) unstable; urgency=medium . * New upstream version 2.4.5 with various CVE fixes. (Closes: #892782) - CVE-2018-7730: fix a buffer overflow in the PSD parser. - CVE-2018-7728: fix a buffer overflow in the TIFF parser. - CVE-2018-7729: fix a buffer overflow in PostScript parser. - CVE-2018-7731: fix a null dereference in WEBP parser. * Enable all hardening build flags Checksums-Sha1: f0277abe5eab179b9d1fd70faf3771c14c6d2131 1953 exempi_2.4.5-1.dsc 9e22935ab834f556a3e9e00c3a871a773dc08db9 3615134 exempi_2.4.5.orig.tar.bz2 8b3e161726dc67e6b7d5e90e78c3fc61cc70bbf8 9684 exempi_2.4.5-1.debian.tar.xz cbe6ba36942163eabbf2d2f99e55b2889271253b 5520 exempi_2.4.5-1_source.buildinfo Checksums-Sha256: 825346603b5305f4d27d8ebd521c2c46f65fbc1cb999649380e8fe31daa76a1f 1953 exempi_2.4.5-1.dsc 406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e 3615134 exempi_2.4.5.orig.tar.bz2 3bb107fe15cf24686047b0c4da377ee3a4dfdd876c3f56f5d1e0ad0aaf66b7e6 9684 exempi_2.4.5-1.debian.tar.xz 97ad3e6d668f5f2b6e229f721c5c001a560f789b9be86a6add14552d6dcb6fd9 5520 exempi_2.4.5-1_source.buildinfo Files: ce56fbf9ce0a9a791d2a9031eaf059ae 1953 libs optional exempi_2.4.5-1.dsc bb7a06ef8bbf79a59e32562b198daefd 3615134 libs optional exempi_2.4.5.orig.tar.bz2 fecd326275819cfb353238fd2d8a5228 9684 libs optional exempi_2.4.5-1.debian.tar.xz dc5c37fd081897fe64ec48ad47a47d63 5520 libs optional exempi_2.4.5-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAlqpJXMACgkQauHfDWCP ItzFLA/9Gl+347JxuKE0BtcmpU/BMPh9x5o4i7K9V2YLknyX/QHoOU/g0fb5mRkC /b8A9oXOYnB6RUMRfElAcyTL1XkzuFlAiVeLiQHn8LAVaVkqm6sQ387MHbvHL6Sf 8B74y1keENoxraQUGfXq8Z7ogYaRNwdQqxpwkDnRYgwJo7kqbiuYGYELQovbjSfw hGPB5IZ2HpZN97Ha/v+qTtcmPVkCHOistqhloeRiMD54P/C2JFQMLYGAg9wWPNnm /DY59X58JxabF//I1W8i5ej1gITedxMd6v7daHvkppbUF1ONootxDIVujdno6GW1 Upc8wLtzhWx1F7KsG5gtjRsifmMoGDjUk7KOn+musvUaue8u+KwDbn6ZNe/crJwS T18sKv4SkP1kjR4to1ZcLrWgv2618lKUufm7014UfvswbqFj8w0YZEoUFcC6G/f+ Wd+kIhm6609TugZ6RpV4eqt+W8x7F3AL32YgakqJk/Cx97UiI0Die1IRaqa0S1Mx TjVR0DIQaJxM10SqEIN2MXqjJE28bwntszGZLGjSstlIfYdC+42EVoWwiCS5NbYA +TvkrECuUe79CmG+yaceBugEV//Bmo7KXdZshqJNpaKJGKS+AEOzJQzmfDzLVhbg IWdO/U4Ohf99uKDA2wYBVgIwNV6v57UblQ22lwb8gQyCxAOm8K8= =MQjI -----END PGP SIGNATURE-----
