Accepted openimageio 2.0.5~dfsg0-1+deb10u1 (source) into oldstable
- To: dispatch@tracker.debian.org, debian-lts-changes@lists.debian.org
- Subject: Accepted openimageio 2.0.5~dfsg0-1+deb10u1 (source) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 04 Apr 2023 22:50:20 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: openimageio_2.0.5~dfsg0-1+deb10u1_source.changes
- Debian-source: openimageio
- Debian-suite: oldstable
- Debian-version: 2.0.5~dfsg0-1+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=47GjdcOYEwcFP7t6PW3i5drnPlic0Cwe8Jl79/mMxM4=; b=QYFzJWvKkR70QqkhSZw1x/kTo2 j2d5GuB9BBq3XCyviaG2Ky5mkF9I01dypBGwQd7HVx+UMTqusbOZYZtB67F13CJqI63WtoOi7srOP nZtShs+qQmk31N2RtoXkUT+QZea1P5R4v8SEscljzrSkyBUsaaOuuHvTOPyUib+FKvpAcoE9T8LVA 2JD+cRbc1PE/AwtXPZMkIdSExKrM2pZ0LuELdkqBnFTjJkXoFUFTI1SNIZvo5l2HgBhnnFhMLlYlQ Q0UGrhsLhYTCA+uVi5xQ59zFfeS4BKB+HQ0RvgWbkGu4ktS6njxPSZh5Fzyow4XzzgsQu+EB3NL/l 5ijjJ1Ag==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1pjpTo-008D31-Pz@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 5 Apr 2023 00:31:52 CEST
Source: openimageio
Architecture: source
Version: 2.0.5~dfsg0-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
bb97f374b0800d92a9a5e35447ea7a3490833afd 2961 openimageio_2.0.5~dfsg0-1+deb10u1.dsc
e7e755735900f35a28d298821d9bb69e15b76506 24524232 openimageio_2.0.5~dfsg0.orig.tar.xz
aabb7db9bd55013c41a7ab5954ad1ef2efb15929 34764 openimageio_2.0.5~dfsg0-1+deb10u1.debian.tar.xz
b8ab349eb01d511335645b0f66e3ad9a6c4f7510 27058 openimageio_2.0.5~dfsg0-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
711bdf89707e1d5da3babff49cd8614590e5d9ce23a6c1029a3c9ee3410242ed 2961 openimageio_2.0.5~dfsg0-1+deb10u1.dsc
30b76d6c1fa7f307da4433599fa4758f05ef64e270be7f5754699cd98cae3cf5 24524232 openimageio_2.0.5~dfsg0.orig.tar.xz
30ec49d37305a31b2fa8acf68283c2ae384829a65897410f80616bc124119541 34764 openimageio_2.0.5~dfsg0-1+deb10u1.debian.tar.xz
17f16e27cf945e018df71eda491e23e3a9e9f7a715f0a034f031d909e1c75efc 27058 openimageio_2.0.5~dfsg0-1+deb10u1_amd64.buildinfo
Changes:
openimageio (2.0.5~dfsg0-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2022-36354, CVE-2022-41639, CVE-2022-41977, CVE-2022-41988,
CVE-2022-41838, CVE-2022-41999, CVE-2022-41981, CVE-2022-43592,
CVE-2022-43593, CVE-2022-43594, CVE-2022-43595, CVE-2022-43596,
CVE-2022-43597, CVE-2022-43598, CVE-2022-43599, CVE-2022-43600,
CVE-2022-43601, CVE-2022-43602 and CVE-2022-43603.
Multiple security vulnerabilties have been discovered in OpenImageIO, a
library for reading and writing images. Buffer overflows and out-of-bounds
read and write programming errors may lead to a denial of service
(application crash) or the execution of arbitrary code if a malformed image
file is processed.
Files:
9c48785b8ec7ca51a90245e99d4385bf 2961 libs optional openimageio_2.0.5~dfsg0-1+deb10u1.dsc
b00e35be94d1474ce27876388e5f669b 24524232 libs optional openimageio_2.0.5~dfsg0.orig.tar.xz
23096078d81fa99b044608f1fe17e351 34764 libs optional openimageio_2.0.5~dfsg0-1+deb10u1.debian.tar.xz
7a9778f6120d469d2495b9f09ace33de 27058 libs optional openimageio_2.0.5~dfsg0-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=37mN
-----END PGP SIGNATURE-----