-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Aug 2021 11:46:33 +0200 Source: exiv2 Binary: exiv2 exiv2-dbgsym libexiv2-14 libexiv2-14-dbgsym libexiv2-dev Architecture: ppc64el Version: 0.25-4+deb10u2 Distribution: buster-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-unicamp-01) Changed-By: Moritz Mühlenhoff Description: exiv2 - EXIF/IPTC/XMP metadata manipulation tool libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files Closes: 950183 986888 987277 991705 991706 Changes: exiv2 (0.25-4+deb10u2) buster-security; urgency=medium . * CVE-2021-31291 (Closes: #991705) The fix for CVE-2021-31291 also required to backport a few patches that fix some (harmless) CVEs alongside: - CVE-2019-20421 (Closes: #950183) - CVE-2021-3482 (Closes: #986888) - CVE-2021-29457 (Closes: #987277) - CVE-2021-29473 (Closes: #991705) * CVE-2021-31292 (Closes: #991706) Checksums-Sha1: 20fbb1bc9fa29eb1eb4199ad8aaef4127b6b8040 751128 exiv2-dbgsym_0.25-4+deb10u2_ppc64el.deb 0c1e88a5dea3da687151f2e50b68246dd06cdaf6 7382 exiv2_0.25-4+deb10u2_ppc64el-buildd.buildinfo d15045cc736a0d5103aaac4b73535dbbb68e2b51 107552 exiv2_0.25-4+deb10u2_ppc64el.deb 125052b99e27d790c870d5c6e848acc06b34ad22 8058900 libexiv2-14-dbgsym_0.25-4+deb10u2_ppc64el.deb 0ad96be058fa32ebd0ac68617f822d061430c88c 703748 libexiv2-14_0.25-4+deb10u2_ppc64el.deb 16fb2111f9f4dcaa149f271e40d133b316a3ae48 1598412 libexiv2-dev_0.25-4+deb10u2_ppc64el.deb Checksums-Sha256: b6a025951c953c5d338a8dc1d90275919d0fb940c946c13530230cdaf592e4bc 751128 exiv2-dbgsym_0.25-4+deb10u2_ppc64el.deb 3d0188dd0b7a03e4c059c4ce03bc2af781e9657af48fa79da6163f1777b4f498 7382 exiv2_0.25-4+deb10u2_ppc64el-buildd.buildinfo 7c4e5e13f07bd4be5fcdf0e41518c2f523cd82fb736312a444817fa5c153e43d 107552 exiv2_0.25-4+deb10u2_ppc64el.deb 2df5cc341307d8f9377ba75c5cb962797c2b8a8843cf461a089c33f2b554eb15 8058900 libexiv2-14-dbgsym_0.25-4+deb10u2_ppc64el.deb 5bd0eb7ece733e6b52e1533b6d96b88f0d58cc64ed6ea3e45e2da2cb78b011b8 703748 libexiv2-14_0.25-4+deb10u2_ppc64el.deb 840b093312f4b87286e155bcd1d0031dd01034f706479c852ad3f13d02f482c4 1598412 libexiv2-dev_0.25-4+deb10u2_ppc64el.deb Files: aa4c16a962a0bfa824ec33d1333b6011 751128 debug optional exiv2-dbgsym_0.25-4+deb10u2_ppc64el.deb fae1ac17241fd081701f290fe545a4b0 7382 graphics optional exiv2_0.25-4+deb10u2_ppc64el-buildd.buildinfo a17e88d887a5b91411c95ac6b27498d3 107552 graphics optional exiv2_0.25-4+deb10u2_ppc64el.deb 52a900a1b3ad98e38871aa77c80bf8bf 8058900 debug optional libexiv2-14-dbgsym_0.25-4+deb10u2_ppc64el.deb a7603e53cce829222e5ae364f75349a7 703748 libs optional libexiv2-14_0.25-4+deb10u2_ppc64el.deb 3a9649950503043d1266bd7c15800c11 1598412 libdevel optional libexiv2-dev_0.25-4+deb10u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKzbeWucQH7PwwtgznSwNtUaaPI8FAmENFYkACgkQnSwNtUaa PI9vnQ/8DPlbm09npKr2DKt/AndZbA33Jj+QZ/tV+3wUkmIotk+TweaFUp3dWzhV STwGWaFw7wcy4LDeJmnNt/060vhcR+YmZrzrdqNBAQ5FdDVrQ28vNsSZAe7SAGPX 0j0CMATPpoEGsjYwsqrzUPHwBVWEKs+2lhITicNhtoNNNCCb9HFS8l0f+PhEKw/h CD0m8szulROTp4FhA/mRirWOjy1dttgTwdF6UkXgE9U6IJ7DTMoAFm9n0DTKniWv U4O2l989C0Q6v80LTFnfAazrUGktp0LEvUX1dXla78b8OGESN9OJJ/+Kpx9SGeph Qi279qUWZzVjHrPzd5tKk4kPlP3fAd+kCsQ7+UTbor5NewqkzbJRno+Tc7bgvzQ8 67G/zQ8tY/AwY0NqDfmRDorbrvapvYL2dah5jZA4pYCcYjI55H9ODR3u8whAstEj Wz4KuZ+PYaF1+8S3cmgE359JoxFhV1hdB3loBQFLNTspqsk5mYvJBLeXTGPMFejo QYkAm4J4TabTc8SGDTGowBxPoq3xjBTEV8H004pAUiuPx2pbZuQ5jCEzql+4smLV u/a2xaSPQoq/eW1IsSX12LhDx1H6sPfGGyk0d3AHz29CeN/0GxpKRTLJRLgzXf7F glNHknhtN/21q2vEzElpa3JBlq+f1tSNgzbsVC+8FL0Ok472RYo= =VrCt -----END PGP SIGNATURE-----