Accepted tiff 4.0.8-2+deb9u7 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 18 Sep 2021 18:41:25 +0530
Source: tiff
Architecture: source
Version: 4.0.8-2+deb9u7
Distribution: stretch-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
tiff (4.0.8-2+deb9u7) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch so that LogLuvSetupEncode() error
must return 0. (Fixes: CVE-2020-19144)
* Add patch to fix invertImage() for bps
2 and 4. (Fixes: CVE-2020-19131)
Checksums-Sha1:
c78820a62685a6a8a004a6e208f83d09a2a9d395 2214 tiff_4.0.8-2+deb9u7.dsc
88717c97480a7976c94d23b6d9ed4ac74715267f 2065574 tiff_4.0.8.orig.tar.gz
0d09bc59871d3a9f35fcc02d867d737669f38a04 38912 tiff_4.0.8-2+deb9u7.debian.tar.xz
adabcab1284dda685722c1b569e16cee19ee6fa2 6143 tiff_4.0.8-2+deb9u7_source.buildinfo
Checksums-Sha256:
b5be558cde48e31e02f020ee857c4c186f14ea6704bf51de05a58ca862e50023 2214 tiff_4.0.8-2+deb9u7.dsc
59d7a5a8ccd92059913f246877db95a2918e6c04fb9d43fd74e5c3390dac2910 2065574 tiff_4.0.8.orig.tar.gz
792512a24e434bd349813bccf7443ef7da1e780bde2f6920eb789fb06825e166 38912 tiff_4.0.8-2+deb9u7.debian.tar.xz
1fb39d99453d7b11e589f41e1ee619d429c018697005ef4609e9c405dcb0891f 6143 tiff_4.0.8-2+deb9u7_source.buildinfo
Files:
175890f6e3d10c0d05d003de7ea83a67 2214 libs optional tiff_4.0.8-2+deb9u7.dsc
2a7d1c1318416ddf36d5f6fa4600069b 2065574 libs optional tiff_4.0.8.orig.tar.gz
46ae6abd5ed4ae315625efeb419439f5 38912 libs optional tiff_4.0.8-2+deb9u7.debian.tar.xz
6d528f87409d4e5a8a85bf025d3026d4 6143 libs optional tiff_4.0.8-2+deb9u7_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=HtjP
-----END PGP SIGNATURE-----