Accepted openexr 2.2.0-11+deb9u2 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 13 Dec 2020 15:17:50 +0000
Source: openexr
Binary: openexr openexr-doc libopenexr-dev libopenexr22
Architecture: source amd64 all
Version: 2.2.0-11+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
libopenexr-dev - development files for the OpenEXR image library
libopenexr22 - runtime files for the OpenEXR image library
openexr - command-line tools for the OpenEXR image format
openexr-doc - documentation and examples for the OpenEXR image format
Changes:
openexr (2.2.0-11+deb9u2) stretch-security; urgency=high
.
* CVE-2020-16588: Prevent a null-pointer deference issue in generatePreview.
* CVE-2020-16589: Prevent a heap-based buffer overflow issue in
writeTileData.
Checksums-Sha1:
56a6e208fe4b03da1574b64cd591bae2a1453c7b 2308 openexr_2.2.0-11+deb9u2.dsc
d09a68c4443b7a12a0484c073adaef348b44cb92 14489661 openexr_2.2.0.orig.tar.gz
0fa9b5ec6cb24165739bb989064f195460eff296 28344 openexr_2.2.0-11+deb9u2.debian.tar.xz
84e4a350704ef3b0f7a4420b64e6a359d6b87155 703584 libopenexr-dev_2.2.0-11+deb9u2_amd64.deb
15155b57284e9a6af1659ad03aae53a44315e759 3875296 libopenexr22-dbgsym_2.2.0-11+deb9u2_amd64.deb
ee7c1370876c3fdb2a6931d464d466881f3f3c89 585370 libopenexr22_2.2.0-11+deb9u2_amd64.deb
ea354fe5021c72b32083c2f4686e04abbe67bb27 655430 openexr-dbgsym_2.2.0-11+deb9u2_amd64.deb
856bab43b9748cdd96d398e574b99b863e76519e 2324608 openexr-doc_2.2.0-11+deb9u2_all.deb
165d8a09ac25ce6835c5fa27eb73239938ad354a 7385 openexr_2.2.0-11+deb9u2_amd64.buildinfo
8d1c94dfd2483ffeee4c9c39b56917cbd566dc3f 85354 openexr_2.2.0-11+deb9u2_amd64.deb
Checksums-Sha256:
928aa0719a3c9a43e4efc648164bf77bb708d5672e95e8ba6a90593ae5cc082d 2308 openexr_2.2.0-11+deb9u2.dsc
36a012f6c43213f840ce29a8b182700f6cf6b214bea0d5735594136b44914231 14489661 openexr_2.2.0.orig.tar.gz
01e7b232fc8280951fad4bc20172d95219d7f69b71893dc60fa612474d2594a8 28344 openexr_2.2.0-11+deb9u2.debian.tar.xz
77871d70d64e6bbed33cf94ef5af1584c344b53c8947eaa87bd98c870c4d1b12 703584 libopenexr-dev_2.2.0-11+deb9u2_amd64.deb
0e6d6fcf3b6bad69900cde8f9a043a8f4fad1c72f8227dec1dba02edfb25da1e 3875296 libopenexr22-dbgsym_2.2.0-11+deb9u2_amd64.deb
a4910f04ba63a5db20276e66a53b755d5bf7fb8a4b8090e236dbad2dbbf6cdbc 585370 libopenexr22_2.2.0-11+deb9u2_amd64.deb
91992c5a7dda4cf8f22968c5f02fa4637d4a1e0418a295373152c1276942ec23 655430 openexr-dbgsym_2.2.0-11+deb9u2_amd64.deb
beb80b0479cf991c1edbc577f47398c317b81d501218acc16387c3728fe55479 2324608 openexr-doc_2.2.0-11+deb9u2_all.deb
4ba9e2f6f8a2fd246e7ffe6d921752ed78dcaa60c82fd7bf5479262aefab7894 7385 openexr_2.2.0-11+deb9u2_amd64.buildinfo
7270f16f4e991be99d86d4f5cf29c798e2ef54d7b2143a7416fcd444cea88bf0 85354 openexr_2.2.0-11+deb9u2_amd64.deb
Files:
55755e2909975c57df572c723dd08c2c 2308 graphics optional openexr_2.2.0-11+deb9u2.dsc
b64e931c82aa3790329c21418373db4e 14489661 graphics optional openexr_2.2.0.orig.tar.gz
ef3e27625bf9617250f57cd61cda4c10 28344 graphics optional openexr_2.2.0-11+deb9u2.debian.tar.xz
c94cba3c9490311ff9a209e10a3d0865 703584 libdevel optional libopenexr-dev_2.2.0-11+deb9u2_amd64.deb
931a73bb560dffdf48e5b8b07623b4cc 3875296 debug extra libopenexr22-dbgsym_2.2.0-11+deb9u2_amd64.deb
e248e5377fbc6a394ae2fada92f0d0fc 585370 libs optional libopenexr22_2.2.0-11+deb9u2_amd64.deb
ecdb3a68eac65c13c789462e042a4a6b 655430 debug extra openexr-dbgsym_2.2.0-11+deb9u2_amd64.deb
4610284a8630fa9bc90befc5a6d2d5d7 2324608 doc optional openexr-doc_2.2.0-11+deb9u2_all.deb
5d1691164f937365effb27a2549554c4 7385 graphics optional openexr_2.2.0-11+deb9u2_amd64.buildinfo
8297d55c8cfbb7c18cf26d1e580e3e99 85354 graphics optional openexr_2.2.0-11+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=3XyK
-----END PGP SIGNATURE-----