-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Aug 2021 11:46:33 +0200 Source: exiv2 Binary: exiv2 exiv2-dbgsym libexiv2-14 libexiv2-14-dbgsym libexiv2-dev Architecture: armhf Version: 0.25-4+deb10u2 Distribution: buster-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Moritz Mühlenhoff Description: exiv2 - EXIF/IPTC/XMP metadata manipulation tool libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files Closes: 950183 986888 987277 991705 991706 Changes: exiv2 (0.25-4+deb10u2) buster-security; urgency=medium . * CVE-2021-31291 (Closes: #991705) The fix for CVE-2021-31291 also required to backport a few patches that fix some (harmless) CVEs alongside: - CVE-2019-20421 (Closes: #950183) - CVE-2021-3482 (Closes: #986888) - CVE-2021-29457 (Closes: #987277) - CVE-2021-29473 (Closes: #991705) * CVE-2021-31292 (Closes: #991706) Checksums-Sha1: 11d0e078c4af2ae5e569b811890a03e4b9e83979 707792 exiv2-dbgsym_0.25-4+deb10u2_armhf.deb acaf778d0f4a6492050318c25f0ac9cfdf7271e4 7248 exiv2_0.25-4+deb10u2_armhf-buildd.buildinfo 3b13cab0a6003f13bc9fce473d1c3a4c516ad292 98252 exiv2_0.25-4+deb10u2_armhf.deb b07dfa8e3b072e095d2bfb61936e83b03e7d21d7 7699856 libexiv2-14-dbgsym_0.25-4+deb10u2_armhf.deb 764acdc6139f654acf1a80661d82a531d8250f19 620088 libexiv2-14_0.25-4+deb10u2_armhf.deb 0b6495548157962606ca859dbdd5f5c6d84f51c5 1556268 libexiv2-dev_0.25-4+deb10u2_armhf.deb Checksums-Sha256: 13e454a178b61edbc3edd9939a6864585b9f93235cf06788b48dfb1e2b6370d1 707792 exiv2-dbgsym_0.25-4+deb10u2_armhf.deb 77f689f53f3b457471b08a49e956e8282a44b6362b380ac122a28a4d639a56a1 7248 exiv2_0.25-4+deb10u2_armhf-buildd.buildinfo bad62192b2b9c4a4fdb52cd4a9f51fc44f4a43d202c80738725b4ee5c5c0be15 98252 exiv2_0.25-4+deb10u2_armhf.deb 0e9e3e36aa68026ef69d6253763a234f4f1eb7b962ba818a8533782d3027633e 7699856 libexiv2-14-dbgsym_0.25-4+deb10u2_armhf.deb 2373b0acdfbabb95cb3e27c7ec8b01daf7caa0fc4148e33a73c3aa5db1b3d6fa 620088 libexiv2-14_0.25-4+deb10u2_armhf.deb a516e295b23652122b91e86631b73ddbd20ae0d855a16ecd3a451cf489dda44b 1556268 libexiv2-dev_0.25-4+deb10u2_armhf.deb Files: 25888a6b9bf97f3a780462c558c681a9 707792 debug optional exiv2-dbgsym_0.25-4+deb10u2_armhf.deb 64a0598d6ca5b666b139f7c918084b12 7248 graphics optional exiv2_0.25-4+deb10u2_armhf-buildd.buildinfo 93a135f6d2212c81ce8ac877d3e50185 98252 graphics optional exiv2_0.25-4+deb10u2_armhf.deb 67d3eefcb9b3b2210cc12b219927fe5c 7699856 debug optional libexiv2-14-dbgsym_0.25-4+deb10u2_armhf.deb cc5d5f2cdfcb986504e1d3ba05c72c76 620088 libs optional libexiv2-14_0.25-4+deb10u2_armhf.deb 6f34ac336ea3e8cf4dfa198f76e4b469 1556268 libdevel optional libexiv2-dev_0.25-4+deb10u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnkOoRyjJ0+t2tN7OjOf+cynECFcFAmENFo8ACgkQjOf+cynE CFddbhAApS9comubUP/HO4QQFp9WyVNAeoWMZD3ypFWXV0delbwdxanHFLAXU8A2 4przMYXbAdt6yq/aV3r7Cb05MogPkJpw3Yc9nRBaypvdB+HMGjaDOEiP4jCGIlHS 4xpTiWs0kWAnjFSRclbtreZCqSkKO+vUOi2A1nz/KgtZVfhDC2J4TP/LJV55GtKQ 62ZyCu78EWOAf+j0zRiH6DP8AELIrHP+3/FJlFRk8Qe4ZXF1Q97wnevsGVxf1j4U ECxkXb58kowCX1qZZILDHpfZqtG6PbAmusM8i04nHeib0jQ0fqJtxXwcDi/y0C2/ MXZ/nRAo3CO/pi+5weTAPmZw5x1d5zx8rN4WKmEc+zk7ZLyM9bD8a8yA5UWQt3g1 XMmDrhpa9MsV7jjEARnVwkV56re7MWY9UrlzkLUK9TRRK/R78HIUe78X/MgYi+OV TnVTqFhETMrbV3rbIBWKoOEfTahj0GijqW2FFJvirGK6Vaig8qF9TAH3xH0h74hq nomavDxmuQXaaTT7xP1JHy9a164QD2HKNEDLPi/+SXcdNUOAEybCj6RxWYfZ2lBN I4Knk1TMWOrLfx0T6CkqohqnJXdN85HJdg0JLgVD2ks4Edo5zlm+RHnKu7q8hcuc 8Xie9ULkPmnxQzDDJQo2YfsswR3Jvqr+1Ha9/Vo4IgPy0jxSBLg= =Ezsb -----END PGP SIGNATURE-----