[Pkg-kde-extras] exiv2_0.25-3.1+deb9u2_source.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

Fri Jul 3 19:17:33 BST 2020

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 15 Jun 2020 18:15:41 -0400
Source: exiv2
Binary: exiv2 libexiv2-14 libexiv2-dev libexiv2-doc libexiv2-dbg
Architecture: source
Version: 0.25-3.1+deb9u2
Distribution: stretch
Urgency: medium
Maintainer: Debian KDE Extras Team <pkg-kde-extras at lists.alioth.debian.org>
Changed-By: Roberto C. Sanchez <roberto at debian.org>
Description:
 exiv2      - EXIF/IPTC/XMP metadata manipulation tool
 libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library
 libexiv2-dbg - EXIF/IPTC/XMP metadata manipulation library - debug
 libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files
 libexiv2-doc - EXIF/IPTC/XMP metadata manipulation library - HTML documentation
Changes:
 exiv2 (0.25-3.1+deb9u2) stretch; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Minor adjustment to the patch for CVE-2018-10958 and CVE-2018-10999.  The
     initial patch was overly restrictive in counting PNG image chunks.
   * CVE-2018-16336: remote denial of service (heap-based buffer over-read) via
     a crafted image file.
Checksums-Sha1:
 e2e0103e9b910afeb273bb689c303dc8ccde0f06 2304 exiv2_0.25-3.1+deb9u2.dsc
 2003297c6a5b5806f65257534549771bf123a4f8 28040 exiv2_0.25-3.1+deb9u2.debian.tar.xz
 02469bdeac772d4336150e2cea0891df55657c25 9204 exiv2_0.25-3.1+deb9u2_amd64.buildinfo
Checksums-Sha256:
 7aa1c1b3382f0d8704d8be48509d492713a5cbe65ffd4681d97eb79af774c36e 2304 exiv2_0.25-3.1+deb9u2.dsc
 bc9636648c0cf565e5c379a8818d7e0bdaf1ce30f1688381653307e731829418 28040 exiv2_0.25-3.1+deb9u2.debian.tar.xz
 69e9407cc4e2f437efb7ce2cd91634e2bace268106f79bd84ce4be22b8401e07 9204 exiv2_0.25-3.1+deb9u2_amd64.buildinfo
Files:
 def74ceaf3d62c1d6be070c51fee89a8 2304 graphics optional exiv2_0.25-3.1+deb9u2.dsc
 68b720c63b4a3fb9457aba8b5cd94157 28040 graphics optional exiv2_0.25-3.1+deb9u2.debian.tar.xz
 aae78ad61c34691e237e6bda2b958e5a 9204 graphics optional exiv2_0.25-3.1+deb9u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VIoz
-----END PGP SIGNATURE-----

Thank you for your contribution to Debian.