-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Aug 2021 11:46:33 +0200 Source: exiv2 Binary: exiv2 exiv2-dbgsym libexiv2-14 libexiv2-14-dbgsym libexiv2-dev Architecture: armel Version: 0.25-4+deb10u2 Distribution: buster-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Moritz Mühlenhoff Description: exiv2 - EXIF/IPTC/XMP metadata manipulation tool libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files Closes: 950183 986888 987277 991705 991706 Changes: exiv2 (0.25-4+deb10u2) buster-security; urgency=medium . * CVE-2021-31291 (Closes: #991705) The fix for CVE-2021-31291 also required to backport a few patches that fix some (harmless) CVEs alongside: - CVE-2019-20421 (Closes: #950183) - CVE-2021-3482 (Closes: #986888) - CVE-2021-29457 (Closes: #987277) - CVE-2021-29473 (Closes: #991705) * CVE-2021-31292 (Closes: #991706) Checksums-Sha1: 62f74763150d9c47ab52d12b227ac8804103dab6 707904 exiv2-dbgsym_0.25-4+deb10u2_armel.deb 7e47eee4cdcdabee5e02b6111eea221ebef01ad3 7246 exiv2_0.25-4+deb10u2_armel-buildd.buildinfo c52b6135c9653cbaf8bba0f6317796497591e5f4 96672 exiv2_0.25-4+deb10u2_armel.deb 68d50e6c5a86625671034fedef7b45375b2c29a8 7680252 libexiv2-14-dbgsym_0.25-4+deb10u2_armel.deb 548e58931b2e1498b2b86b5ebd30e1b0ec199295 593660 libexiv2-14_0.25-4+deb10u2_armel.deb e39c6430010f37bbfbaabc1001066dbf7e228e23 1531740 libexiv2-dev_0.25-4+deb10u2_armel.deb Checksums-Sha256: e4625bec03ed9f43bf6fe88bdd199a2ee77e903ab90e128fd433359a41f9c630 707904 exiv2-dbgsym_0.25-4+deb10u2_armel.deb 57e8651076fc5b09aa8084ef5d219cb768b24732fc613bf622e1ee6f9e71458c 7246 exiv2_0.25-4+deb10u2_armel-buildd.buildinfo b986018cf301d776c6d62871880026ccd43faf215fac292c13489131f4af8f3e 96672 exiv2_0.25-4+deb10u2_armel.deb 191706cd3846b7e5c80bacc37e9dbd60aebed9006a59f252afd0e3a7e5c535b4 7680252 libexiv2-14-dbgsym_0.25-4+deb10u2_armel.deb ea717bcb11deecb3752638c96fa32852a4826f17cee8c2d5df4f1fe581a018a5 593660 libexiv2-14_0.25-4+deb10u2_armel.deb 5653131fd6d8d86d0fea33e6cbced27021481ee49cd6da943b69e7961ad8ad37 1531740 libexiv2-dev_0.25-4+deb10u2_armel.deb Files: 0bf945c69aad2cb3e966459e0fa749b5 707904 debug optional exiv2-dbgsym_0.25-4+deb10u2_armel.deb e41d5c4d6f4ff0559daa03dff3fb9231 7246 graphics optional exiv2_0.25-4+deb10u2_armel-buildd.buildinfo fb865ebfd255e3a0dca951e4d3385e78 96672 graphics optional exiv2_0.25-4+deb10u2_armel.deb 7b5a33462dd83ef3ec7bdec0e08c10f3 7680252 debug optional libexiv2-14-dbgsym_0.25-4+deb10u2_armel.deb c75d151f44e2148d4c8d7ae58de62c4b 593660 libs optional libexiv2-14_0.25-4+deb10u2_armel.deb d6fe177a3bc99ff3e1393f4772098b14 1531740 libdevel optional libexiv2-dev_0.25-4+deb10u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEFZimt3pArPw4b+NwUUntMkUVbIkFAmENFqAACgkQUUntMkUV bIlzhQ//Qo1waQbfgcT/JSK8jGOERHHy2N+ok65tlLcIwl2PXQNeoczB9SpXWMDX oQadqEhCjb42XHsQrlVe8bOzZBPtQH3F99cnZaxGQfkQFFl/VXHTAcvoRtPl7Hkc KviAOasLCDNj6pkozNYNNbqZObR3j4rbH330CEWatw1BNA/3M0NQJ1yWyHFu80F2 QWfHxCwlbCMljwDn+zX5opRT6Cwhg5SwUW0oKMRxkKAHRW+OcqSSBMH61u+ZBtII IGzj5vVP2XCW7OoU6Vaz43JE7+sC7qDyQp726n/GPOfc+6W0+vFY4+rAXHAoZcsW Ln/F/fFfM2hbEaIp3PsVjz6zBJj9uOMUdKqQSnD7IWxKP2iWxgQaXpeoJyZae11F AWNWTQXWK0JAFK4omu0d++liLs4cFxaG5TWVoOCzMHZirF5z9h8l2GW27siTwZkO jdHMIqUScj9o+aykAi2EylH23M2TEuVDHyy9km7PW4ngdrHupZP+jkbM3VAwkQbU Z27vy+Z583KGbUpUi4PiW6c99G77rog1GHMA1eOH82vaiZHZ4RmBm+RBGOCmtzKi fFiHkexAcknS+F+xCqEXRiDMDyONKEVtSyG3u7CKkgBowBLGPv+CJHS1Dhb3qONi yCJi5IIAd45EC+bTm4kOZADk1pV5R7nME99sNL/rdW0KLGaadGg= =gGUT -----END PGP SIGNATURE-----