-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Aug 2021 11:46:33 +0200 Source: exiv2 Binary: exiv2 exiv2-dbgsym libexiv2-14 libexiv2-14-dbgsym libexiv2-dev Architecture: s390x Version: 0.25-4+deb10u2 Distribution: buster-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Moritz Mühlenhoff Description: exiv2 - EXIF/IPTC/XMP metadata manipulation tool libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files Closes: 950183 986888 987277 991705 991706 Changes: exiv2 (0.25-4+deb10u2) buster-security; urgency=medium . * CVE-2021-31291 (Closes: #991705) The fix for CVE-2021-31291 also required to backport a few patches that fix some (harmless) CVEs alongside: - CVE-2019-20421 (Closes: #950183) - CVE-2021-3482 (Closes: #986888) - CVE-2021-29457 (Closes: #987277) - CVE-2021-29473 (Closes: #991705) * CVE-2021-31292 (Closes: #991706) Checksums-Sha1: e789a3bb11ad9ea44993ccadd677569109c06370 753340 exiv2-dbgsym_0.25-4+deb10u2_s390x.deb 59543d0c4f60aac44d9e0ab4f857d841fc906125 7269 exiv2_0.25-4+deb10u2_s390x-buildd.buildinfo 6b793f255468d68084e3d5ad0f1a67f7ba4c1664 100152 exiv2_0.25-4+deb10u2_s390x.deb fb2a5ba2ca378dcb3e3f866114b22f259ed8f81f 8184064 libexiv2-14-dbgsym_0.25-4+deb10u2_s390x.deb 2d040bb8bbb0f546187c22c8c583a92aeefcdf27 623544 libexiv2-14_0.25-4+deb10u2_s390x.deb 6df30a63d9132ec7c085f00d11ca3dbec4ec3e04 1475532 libexiv2-dev_0.25-4+deb10u2_s390x.deb Checksums-Sha256: 25f1b256b98a52eff1a075f1caa83393b355082a9b8e63c3b357df35078e4ac4 753340 exiv2-dbgsym_0.25-4+deb10u2_s390x.deb 7f58818a5df1b20a12eae508c734fb48777fd169eef6c20e7b30c511e155f0eb 7269 exiv2_0.25-4+deb10u2_s390x-buildd.buildinfo f297e5b751ba985926dc4f5db83c490092d08b16834c8dee19c7ba7c41eb0641 100152 exiv2_0.25-4+deb10u2_s390x.deb 1afde018429bda6bf02d296a577e3752c1363c1379a6b900f0de6ea0df6235a0 8184064 libexiv2-14-dbgsym_0.25-4+deb10u2_s390x.deb 3b6469578cd37f107faf38c4fe3abbdfcda5b016fabb21e4844f5e68b6c2cdd3 623544 libexiv2-14_0.25-4+deb10u2_s390x.deb 73f681c0ba71ae16dc3a19ce80adcef419041042458436f51840922b56812948 1475532 libexiv2-dev_0.25-4+deb10u2_s390x.deb Files: 20e897795d4d687697398b0f410018f5 753340 debug optional exiv2-dbgsym_0.25-4+deb10u2_s390x.deb a34538d06121c29811dca7fa9f4de650 7269 graphics optional exiv2_0.25-4+deb10u2_s390x-buildd.buildinfo c031e6482888b518c9cf0dc507066e6f 100152 graphics optional exiv2_0.25-4+deb10u2_s390x.deb 34ce3bc8696aed1af5d95914f11e39be 8184064 debug optional libexiv2-14-dbgsym_0.25-4+deb10u2_s390x.deb 9a491433fe49d9462e3c83a7fde61616 623544 libs optional libexiv2-14_0.25-4+deb10u2_s390x.deb 46037916cfa1b6fb83b6528579c1edd4 1475532 libdevel optional libexiv2-dev_0.25-4+deb10u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEFqa2gGJPuqUn28GPt7ZbF/TyQK4FAmENFj4ACgkQt7ZbF/Ty QK6SLhAAodThbekdsrG0etLph7lx3Mb7XfDehNJa86U1cH2tx4Fe3E/Yuz6sqgM8 0FGxlD6SDsRC2pHrEbJncJPd/E80s91DzzmN50SSWaMPa5eD8Ew54/It4a40ebC6 UgRlbOxPPa64t+yu6PfsMNrP2IM27BtAnJuQNEdl/uX5y7X+66sJG8J6/w/LzIg9 eWGAGQDai0IiIa7BRD9ML2DK7b2Xgu/8sUvJyKI0eLBxf2M8AZ+Q9toAVkMq/A0g eT4CSv6hbU1fbECkZ3GDLgOqV1cXXcZJNTNlQJBqTzrIoJce1wa346tY1i2C+3Uu PNlplkEcXNjjCa+HPwRCjSmxY2fUfNrqC3MWNWdN2A+RPR7BEsZCj7/euxm6FomP fpXB4ve11Oxi2vgaIs0YF0PRmPYm5uH04M2jr19afOrUDZDXssF/7LOQxxsqikko n5u7JEdt73rkbR4HjZLvt2iRGnQ1xHzpVRE4aex1ojuOdaCeTQfIA0T+2RjH/o9c IRypoGzSe0kQMwGYSKsmf/6s011umjxHt39CmbHcFBpEqw6JEMvA3+dBb6QP6ohR sp2WQ7CUW6mfmayw2ttDfMgMo4TOStZcfx65jYRQbo1PrT/M13xiwWtvHMr/1ZOi 1DiDnfpZRGGCU7fFGCNuLvO+XXoGRF03dMfr+qJTM6lK4VLJiOA= =LtSw -----END PGP SIGNATURE-----