Accepted apng2gif 1.8-0.1~deb9u1 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 4 Feb 2022 14:20:42 CET
Source: apng2gif
Binary: apng2gif
Architecture: source
Version: 1.8-0.1~deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Jari Aalto <jari.aalto@cante.net>
Changed-By: Markus Koschany <apo@debian.org>
Description:
apng2gif - tool for converting APNG images to animated GIF format
Checksums-Sha1:
2dd9eed34413eb40110ac66f6231aadd18f8987a 2065 apng2gif_1.8-0.1~deb9u1.dsc
f1f24e5ece9b6880334ba218c5ff7dadf91aedda 437914 apng2gif_1.8.orig.tar.gz
dbf266308a6036c1793967beca91aa40836dc524 6912 apng2gif_1.8-0.1~deb9u1.debian.tar.xz
2cf95a916fb7204fa52be23077d4794543435d15 6428 apng2gif_1.8-0.1~deb9u1_amd64.buildinfo
Checksums-Sha256:
1acbda5033d3721564f22978f7e4a0cabcc9ffc1b5469609c496ba916e0069b3 2065 apng2gif_1.8-0.1~deb9u1.dsc
4d47a2c0e6656bbc5afeecccc62b22f885a6b0434944bd52824126a156959649 437914 apng2gif_1.8.orig.tar.gz
103b7763b7df93b52318cba2ff8d1ea2d606fb7d134565f237803d4f8a0039ae 6912 apng2gif_1.8-0.1~deb9u1.debian.tar.xz
fc43a584c772fbf3a6bde48f065ba9b19912136e0626663685cf12f1376bf344 6428 apng2gif_1.8-0.1~deb9u1_amd64.buildinfo
Changes:
apng2gif (1.8-0.1~deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Backport version 1.8 and fix CVE-2017-6960, CVE-2017-6961 and
CVE-2017-6962. Imroper sanitization of user input can result in denial of
service (application crash) or possible execution of arbitrary code if a
malformed image file is processed.
Files:
1386d68be5ed5346ac4206123ea02185 2065 graphics optional apng2gif_1.8-0.1~deb9u1.dsc
4cf980234840ce2aa856cf328c644e85 437914 graphics optional apng2gif_1.8.orig.tar.gz
42ab6c617f2ad24cc877b3c53eb1e5df 6912 graphics optional apng2gif_1.8-0.1~deb9u1.debian.tar.xz
f982012a09d64aef8112aa3e6b2d8d5a 6428 graphics optional apng2gif_1.8-0.1~deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=aPH4
-----END PGP SIGNATURE-----