-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Aug 2021 21:03:02 +0200 Source: gthumb Binary: gthumb gthumb-dbgsym gthumb-dev Architecture: mipsel Version: 3:3.6.2-4+deb10u1 Distribution: buster Urgency: medium Maintainer: mips64el Build Daemon (mipsel-osuosl-02) Changed-By: Thorsten Alteholz Description: gthumb - image viewer and browser gthumb-dev - image viewer and browser - development files Closes: 948197 Changes: gthumb (3:3.6.2-4+deb10u1) buster; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2019-20326 (Closes: #948197) A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file. * additional fix in case orientation swaps width and height Checksums-Sha1: 52b9a3a3036551f4226e4deaeabe0d3932450905 4355504 gthumb-dbgsym_3.6.2-4+deb10u1_mipsel.deb c71f682a85f6c348db18a9d2009f247efec2867f 707716 gthumb-dev_3.6.2-4+deb10u1_mipsel.deb 4f06fe427573f26fe9a6e93212609223e4a69945 21158 gthumb_3.6.2-4+deb10u1_mipsel-buildd.buildinfo 5cea838f6d69bb980a3e892101b6ab33cd1e6010 812672 gthumb_3.6.2-4+deb10u1_mipsel.deb Checksums-Sha256: 40e221b08342f97f5072197da1ab391e2f7ec36376f5411a07352626fbf7deee 4355504 gthumb-dbgsym_3.6.2-4+deb10u1_mipsel.deb ca8e68f1016be2d37c75da271688c61dcf71e137635a79cb9f773b53e84cf489 707716 gthumb-dev_3.6.2-4+deb10u1_mipsel.deb 53e9b9aef072a2756f881893d595d045aa6bc10c665cb659d5090f412f7a0f92 21158 gthumb_3.6.2-4+deb10u1_mipsel-buildd.buildinfo 629d4b7d49d1acc6b97764db94a83ddc824b3c5b787dd3f56bcecf040a55f44b 812672 gthumb_3.6.2-4+deb10u1_mipsel.deb Files: 9eab04abec0019411eb4e2a49f02a30a 4355504 debug optional gthumb-dbgsym_3.6.2-4+deb10u1_mipsel.deb 43c2f9ebe6942e6f9d781ace57443358 707716 devel optional gthumb-dev_3.6.2-4+deb10u1_mipsel.deb e20af5bbd6cc794849870dcb25331d63 21158 gnome optional gthumb_3.6.2-4+deb10u1_mipsel-buildd.buildinfo f62785de864f5b1951e98be9bac941fd 812672 gnome optional gthumb_3.6.2-4+deb10u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3MoVZ9ZwC61enleHma0LVKlb6LIFAmFPjuAACgkQma0LVKlb 6LIrGg//bzASGFfm0cXwCclhgb4t0/zTeJKNrdS7ZShbTFgu98zVIr2/UggMLA3T GDJUgInpaEdq4qLFgzyBgkvDj4K7Pg4gBTH/GVBV3qreBV7JWCwRPXYKN9EvHqwE u0qfwG097+Jj+8/XHCBIM6WkmJFzRPnThmgvd9fthApfGx8lCjx0+zrh3LALIfJl /6nR+kcmIERMxHXzn2ble4EDIqF05OpYWkHecT5N1YeUyMWx5ft/EpmjKG53P0so rTjHBSKdROJ2PWhpYlR1LtCyus2qIg8rUggSPyIRvaFR8zAKdtSIZJwb8vZFbaxK dCAC09IBHc7Hc0PTLgOmaF0C7H8H0kGni5MUNS6rCcNWB723NHoaDq8Fvk8m2abK 3B3wS/tZ4tmVr9dXtKpypXhGheO5Qs9qT00+1ss6FA3sEJfXwlrH8nixJM+rnv4b 7aOPJzePSSoatMq03o5wkVp6bjoKtdixrdrfu6vH1sj6zZnFGJYufCztoApUOHOq NOMxwMmrCUL4SI1xp8LWt6Ifg85EZXxzuqhyIVA+IrGoL7yGUzPeTZnbNCy1fvb0 SON7zmcSLLTmexpWLxX603V8sd0euzQFztilOmDtRoc2Sa5nBYmtsr/vCjeyRqzt 5qypYn6HvCOaOWJRGX6c9oWzR6fXC6lorHvkS/9nemPOHjPU2ME= =XFnK -----END PGP SIGNATURE-----