Accepted libimage-exiftool-perl 10.40-1+deb9u1 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 15 May 2021 14:28:56 +0530
Source: libimage-exiftool-perl
Binary: libimage-exiftool-perl
Architecture: source all
Version: 10.40-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Description:
libimage-exiftool-perl - library and program to read and write meta information in multime
Closes: 987505
Changes:
libimage-exiftool-perl (10.40-1+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch CVE-2021-22204.patch, taken from upstream release 12.24.
The patch fixes CVE-2021-22204: Improper neutralization of user data in
the DjVu file format in ExifTool versions 7.44 and up allows arbitrary
code execution when parsing the malicious image.
Thanks to William Bowling for the bug report on Launchpad.
(Closes: #987505) (LP: #1925985)
Checksums-Sha1:
4c5adde6a015687f3b2d217f7d123cced42fa58c 2290 libimage-exiftool-perl_10.40-1+deb9u1.dsc
d76b0ee3bd0116ada4c52d431aa839aba0f221d1 4220341 libimage-exiftool-perl_10.40.orig.tar.gz
2ef76da6cbe282e489798d1d002f434952b1a3b1 7548 libimage-exiftool-perl_10.40-1+deb9u1.debian.tar.xz
ba006f5d6fc3c6a01a066b4dc69200b431fb1bc4 2447080 libimage-exiftool-perl_10.40-1+deb9u1_all.deb
9d2bc6af7006e9ff35ee0cbbda5915ae124fbd66 6244 libimage-exiftool-perl_10.40-1+deb9u1_amd64.buildinfo
Checksums-Sha256:
13fc56d9cf7da797082348eb3b8c011fc16b7fde8e3a813c9c0addd72fcb9566 2290 libimage-exiftool-perl_10.40-1+deb9u1.dsc
9e3619e2f9c838b37f67ab55fd541b5472b328d5f464468442367292666a05dc 4220341 libimage-exiftool-perl_10.40.orig.tar.gz
a205d7f26333b1fdfc9206dcd49c68eaffd6c1631bc3534607782cc1743b6089 7548 libimage-exiftool-perl_10.40-1+deb9u1.debian.tar.xz
f82a52538ac299798b50dcef108f95285cf7929dcf7351e582c4526b7bcbeecf 2447080 libimage-exiftool-perl_10.40-1+deb9u1_all.deb
dfb06a828ad4a60160c82abeac90655dc17bd61406332fdff97091e6cbf399a5 6244 libimage-exiftool-perl_10.40-1+deb9u1_amd64.buildinfo
Files:
7332012616b538902bea3c4eaaeef6cb 2290 perl optional libimage-exiftool-perl_10.40-1+deb9u1.dsc
dc9ee4da098436ccd73b6b179c4889d1 4220341 perl optional libimage-exiftool-perl_10.40.orig.tar.gz
2bde54e4443dde909b2560491a3da824 7548 perl optional libimage-exiftool-perl_10.40-1+deb9u1.debian.tar.xz
d9f2b2f762d8df020ff7692e94e61065 2447080 perl optional libimage-exiftool-perl_10.40-1+deb9u1_all.deb
cf3e5595a7873fcb2f5c1094ec62f737 6244 perl optional libimage-exiftool-perl_10.40-1+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=VkBk
-----END PGP SIGNATURE-----