[Pkg-phototools-devel] libexif_0.6.21-5.1+deb10u3_source.changes ACCEPTED into proposed-updates->stable-new, proposed-updates

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 25 May 2020 22:01:18 +1000
Source: libexif
Architecture: source
Version: 0.6.21-5.1+deb10u3
Distribution: buster
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel at lists.alioth.debian.org>
Changed-By: Hugh McMaster <hugh.mcmaster at outlook.com>
Closes: 961407 961409 961410
Changes:
 libexif (0.6.21-5.1+deb10u3) buster; urgency=medium
 .
   * Add upstream patches to fix multiple security issues:
     - cve-2020-13112.patch: Fix MakerNote tag size overflow issues at
       read time (CVE-2020-13112) (Closes: #961407).
     - cve-2020-13113.patch: Ensure MakerNote data pointers are
       NULL-initialized (CVE-2020-13113) (Closes: #961409).
     - cve-2020-13114.patch: Add a failsafe on the maximum number of
       Canon MakerNote subtags to catch extremely large values in tags
       (CVE-2020-13114) (Closes: #961410).
Checksums-Sha1:
 4f64cbc1a81d5be96fb00479c2ecc21a6328e672 2149 libexif_0.6.21-5.1+deb10u3.dsc
 83d874919e5fcc94ec173d12b2ce37958a7d4833 17460 libexif_0.6.21-5.1+deb10u3.debian.tar.xz
 bd1e28d228bc992c8182c687a4ef61f1e1e32996 7990 libexif_0.6.21-5.1+deb10u3_source.buildinfo
Checksums-Sha256:
 f2bc9aa115afa6677af69104271c6bbfc3ee850d46c8ac44bf500e750ac42c08 2149 libexif_0.6.21-5.1+deb10u3.dsc
 145cbc5d189453b5502b5e68d8fcacd9e9ecea25a8922b5ed4b363d5aec6b51a 17460 libexif_0.6.21-5.1+deb10u3.debian.tar.xz
 44eebbc6b98605f26f5b008a81dba53dcd51583aebf1cae518f82bf7686742ca 7990 libexif_0.6.21-5.1+deb10u3_source.buildinfo
Files:
 ff02ede5b25b6562df054bb1385bb90d 2149 libs optional libexif_0.6.21-5.1+deb10u3.dsc
 efd7d86ebd81ec4880288fa6101c08bb 17460 libs optional libexif_0.6.21-5.1+deb10u3.debian.tar.xz
 49d43370d4e9f504d71127350e2f7ab7 7990 libs optional libexif_0.6.21-5.1+deb10u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=6zSk
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.