Back to libraw PTS page

Accepted libraw 0.21.1-5 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 05 Jul 2023 22:47:57 +0200
Source: libraw
Architecture: source
Version: 0.21.1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Matteo F. Vescovi <mfv@debian.org>
Closes: 1036281
Changes:
 libraw (0.21.1-5) unstable; urgency=medium
 .
   * debian/patches/: patchset updated (Closes: #1036281)
     - 0001-Do-not-set-shrink-flag-for-3-4-component-images.patch added
       CVE-2023-1729:
       | A flaw was found in LibRaw. A heap-buffer-overflow
       | in raw2image_ex() caused by a maliciously crafted file
       | may lead to an application crash.
Checksums-Sha1:
 4dac7a2e3bc14edfc4c8b6a93b542a35d2339422 2339 libraw_0.21.1-5.dsc
 b7ee789d5d6b46cde1a3431646b0200b4d33f5d2 23828 libraw_0.21.1-5.debian.tar.xz
 41bfdee6b2a9a5ee03e61c42b8403ec34e586870 6496 libraw_0.21.1-5_source.buildinfo
Checksums-Sha256:
 a079cee63b48be5b58d6cac13e66d3982909b8d74a29e09b8a585e4e6e2389ce 2339 libraw_0.21.1-5.dsc
 f990e84a42edcd2b4af0f3c5a38a3b73e810008ab13d6ce480dc3336a825f377 23828 libraw_0.21.1-5.debian.tar.xz
 0624d508c2cf98136932a50529c793353e466b8f254196fe9a1d29437590fb32 6496 libraw_0.21.1-5_source.buildinfo
Files:
 ca53b7cabaf4b10ec93af27add759d94 2339 libs optional libraw_0.21.1-5.dsc
 5048b249ea5d4a20f1b9150b27ac52a1 23828 libs optional libraw_0.21.1-5.debian.tar.xz
 8e4718eeed5ea982b7cd80f65d64754f 6496 libs optional libraw_0.21.1-5_source.buildinfo

-----BEGIN PGP SIGNATURE-----
Comment: Debian powered!
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=wZsJ
-----END PGP SIGNATURE-----