Accepted pngcrush 1.8.13-0.1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 22 Feb 2019 09:07:23 +0100
Source: pngcrush
Binary: pngcrush
Architecture: source
Version: 1.8.13-0.1
Distribution: unstable
Urgency: medium
Maintainer: Margarita Manterola <marga@debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Description:
pngcrush - optimizes PNG (Portable Network Graphics) files
Closes: 874109
Changes:
pngcrush (1.8.13-0.1) unstable; urgency=medium
.
* Non-maintainer upload.
* New upstream version
* Decide for latest upstream but found in upstream changelog:
Version 1.7.87 (built with libpng-1.6.18 and zlib-1.2.8)
Fixed a double-free bug (CVE-2015-7700). There was a "free" of the
sPLT chunk structure in pngcrush and then again in png.c (Bug report
by Brian Carpenter).
Closes: #874109
* Standards-Version: 4.3.0
* Remove custom compression settings in debian/source/options
* hardening=+all
Checksums-Sha1:
36c3c08299bd7206a47e3944c5c6df4b030f9a1f 1991 pngcrush_1.8.13-0.1.dsc
20654cd63a90afa9fec947cd7547edd3cf9ea975 66104 pngcrush_1.8.13.orig.tar.xz
1e4fb2720e66910d847bd5714a2e6a40e12a9214 14300 pngcrush_1.8.13-0.1.debian.tar.xz
Checksums-Sha256:
4fa7134d80352bd445b5075853a608197f0a9046962ffca2939cb7103d8e5b6a 1991 pngcrush_1.8.13-0.1.dsc
3b4eac8c5c69fe0894ad63534acedf6375b420f7038f7fc003346dd352618350 66104 pngcrush_1.8.13.orig.tar.xz
211b1b20798bdb38d2c407200e6008753f3a4cb5145138bab29b607bafdbdc42 14300 pngcrush_1.8.13-0.1.debian.tar.xz
Files:
0ef800f538212411bee5c9334dbd50cf 1991 graphics optional pngcrush_1.8.13-0.1.dsc
3ef6abefa978dc021bd3dd41c602e822 66104 graphics optional pngcrush_1.8.13.orig.tar.xz
e4c18146fe56f16e48b22d01329a114c 14300 graphics optional pngcrush_1.8.13-0.1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQJFBAEBCAAvFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAlxvrlkRHHRpbGxlQGRl
Ymlhbi5vcmcACgkQV4oElNHGRtHWMQ//cLssmUJE/ocKJSmqbvAd6/ahHp2E6rSq
5ELSrgLCcDnbm5htJJxNjGRh8girECmJyeXYumcprI5lzdjYvslv6QQgUbNw6Xao
gs+SdddKSK8DeZAgTdSGUb+VrvKzhxE+cflD5ZdEBvuIbq04yUuYbubz+Qu+aABF
5Nq0UUDYjxo35+if5I6ozxRpxY+MQb2NaC964aZ2+kRBXQIurNnRdr/4jxojB82s
Ue7fN5L0WaUg7uSar0QBmte6d4pfd+UxRvmGt4fidts+pvsos0277UGovMXr9y1K
TgYGwZ3xTpASLOZWZrUCwWTTZPuRsYEDtTB4hWaVubr/h3rwDijQduOTSvJdkHF8
S+HaDcl8W28lMNqAQv7BRld1JwT3CCRMR3HNjVcCJA5KKhIIntMeLrVdS5b3iPDc
XeHvPJ7ZhL4K9tYI5ga1R47rdok3NwlFiWYHiLyDqI99UJdZICgZMEnIFuCfjeJq
MZtU/urc+Vwohi7JdyMpX3GYFbv4POesNP7kwcXmGLBkKOkUkQWPTyqe3+N4zw7w
fvzxTuKaa74lgdC+82fEG7VroF+XrWx/PQHcyL2CHkQ1upPyqC6qRs0Mrd9x3qJf
Q5iAnQaGwb96rb1jqYWeoSGXjCO/6EjKNLdOTLeY+z3902bzWT06WLnGVmClRIXc
kBzDnSjanp4=
=tme3
-----END PGP SIGNATURE-----