• Accepted exiv2 0.25-4+deb10u2 (source amd64 all) into oldstable-propose

    From Debian FTP Masters@21:1/5 to All on Fri Aug 27 13:20:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Fri, 06 Aug 2021 11:46:33 +0200
    Source: exiv2
    Binary: exiv2 exiv2-dbgsym libexiv2-14 libexiv2-14-dbgsym libexiv2-dev libexiv2-doc
    Architecture: source amd64 all
    Version: 0.25-4+deb10u2
    Distribution: buster-security
    Urgency: medium
    Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Moritz Mühlenhoff <jmm@debian.org>
    Description:
    exiv2 - EXIF/IPTC/XMP metadata manipulation tool
    libexiv2-14 - EXIF/IPTC/XMP metadata manipulation library
    libexiv2-dev - EXIF/IPTC/XMP metadata manipulation library - development files
    libexiv2-doc - EXIF/IPTC/XMP metadata manipulation library - HTML documentation
    Closes: 950183 986888 987277 991705 991706
    Changes:
    exiv2 (0.25-4+deb10u2) buster-security; urgency=medium
    .
    * CVE-2021-31291 (Closes: #991705)
    The fix for CVE-2021-31291 also required to backport a few patches that
    fix some (harmless) CVEs alongside:
    - CVE-2019-20421 (Closes: #950183)
    - CVE-2021-3482 (Closes: #986888)
    - CVE-2021-29457 (Closes: #987277)
    - CVE-2021-29473 (Closes: #991705)
    * CVE-2021-31292 (Closes: #991706)
    Checksums-Sha1:
    20fe91053ed189f21c61cece1801e599131e017c 2269 exiv2_0.25-4+deb10u2.dsc
    adb8ffe63916e7c27bda9792e690d1330ec7273d 5434325 exiv2_0.25.orig.tar.gz
    44f6e83f5bb1a770ecaa12850eec38dd593aa10f 30956 exiv2_0.25-4+deb10u2.debian.tar.xz
    e7475432b51b041a116fe5e937b8454f10e7aabb 775632 exiv2-dbgsym_0.25-4+deb10u2_amd64.deb
    ad766cb67ffdd91dc439c388baf9c1752bdedefe 9565 exiv2_0.25-4+deb10u2_amd64.buildinfo
    e9b0c3d94d9a7606194ff8f5bbc8892db6c58edd 107560 exiv2_0.25-4+deb10u2_amd64.deb
    d58f725ed3373b935a40b4828ec61d83676cc231 8149720 libexiv2-14-dbgsym_0.25-4+deb10u2_amd64.deb
    4fb1c86964b11fe1cecf1fa579cbc423402edb1a 698600 libexiv2-14_0.25-4+deb10u2_amd64.deb
    31e86150890f2a53115edb24a5bb1c0e644c8e90 1556576 libexiv2-dev_0.25-4+deb10u2_amd64.deb
    61399578f80ffb19c257105b66a00e997b6a1508 20850276 libexiv2-doc_0.25-4+deb10u2_all.deb
    Checksums-Sha256:
    388d7495dca737428054c63e3ba90a05e324c28578c5787f2ff3519ba128c5fc 2269 exiv2_0.25-4+deb10u2.dsc
    c80bfc778a15fdb06f71265db2c3d49d8493c382e516cb99b8c9f9cbde36efa4 5434325 exiv2_0.25.orig.tar.gz
    0f22655ad499876c1b52f3cfb3dfc377f1ea76e1b5e7ee5820fafef934abfc1c 30956 exiv2_0.25-4+deb10u2.debian.tar.xz
    5718d821afcbe3077e177adc74b68fba039cd1806ae100777196a746b3d79ad1 775632 exiv2-dbgsym_0.25-4+deb10u2_amd64.deb
    c3b7e38b28a1cf318287e96899091577aa79b57c38dac5d8b2b9519b9355266a 9565 exiv2_0.25-4+deb10u2_amd64.buildinfo
    b3cbc0d694965864fef0b341ca0b293f976bd36d48c3032446a66c4164f1b9ca 107560 exiv2_0.25-4+deb10u2_amd64.deb
    9747b044d1d8ead04b66986918ab28829145d9dfd21f6bdfeb488e12d770cc23 8149720 libexiv2-14-dbgsym_0.25-4+deb10u2_amd64.deb
    297790599971f5951e787f2e0f502659b00fceb3adf0d3b528b8a869bdf42af0 698600 libexiv2-14_0.25-4+deb10u2_amd64.deb
    3964d4b6440330e4398bf55f934947cdac2a0456664729f68a8cd0f723209951 1556576 libexiv2-dev_0.25-4+deb10u2_amd64.deb
    04dfec7565fbddf740521a799567e379eebbaeaaad135373d40141f28a6a1d1a 20850276 libexiv2-doc_0.25-4+deb10u2_all.deb
    Files:
    2086ccb7255429d6860bc7c7d1d96907 2269 graphics optional exiv2_0.25-4+deb10u2.dsc
    258d4831b30f75a01e0234065c6c2806 5434325 graphics optional exiv2_0.25.orig.tar.gz
    1c5af3abc1f5ef9440a03ce5783be79f 30956 graphics optional exiv2_0.25-4+deb10u2.debian.tar.xz
    07a52f76bbdc61ebf0715d034762f163 775632 debug optional exiv2-dbgsym_0.25-4+deb10u2_amd64.deb
    50dbf38671f48adcf4cfeef508a52133 9565 graphics optional exiv2_0.25-4+deb10u2_amd64.buildinfo
    a19154e2dd7d237b6e3f6c0fb21b02a5 107560 graphics optional exiv2_0.25-4+deb10u2_amd64.deb
    36121ec8636f65bf3e6e9dbbc2ae10e3 8149720 debug optional libexiv2-14-dbgsym_0.25-4+deb10u2_amd64.deb
    2299ddc10ad39340bed5cae72f0e4851 698600 libs optional libexiv2-14_0.25-4+deb10u2_amd64.deb
    d587c8ce4b1cd4cc06e0558c3bd55173 1556576 libdevel optional libexiv2-dev_0.25-4+deb10u2_amd64.deb
    27584ae2587ab2204a920fce3b710da8 20850276 doc optional libexiv2-doc_0.25-4+deb10u2_all.deb

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmENEC0ACgkQEMKTtsN8 TjbDOQ//aAsFKaj9hcXS0VaknOBSN4B0+hQ/ulL4ho2cmn5srWOAPLHszHa0XvuO VGBkv7ajfhNk3mAJUUu4/IaJftKJKp8ngc7vA/ktWUiS7mZ0deDePeXfo5ui0Z9J f5n3iLuD1tA/0XchqflsRL8Wkya2xNx5QkCqGLcPWSbDhDI277sLw55/ILi1XeZ2 5OwIv0mPW697pICia+RM4nf43W0iN8+nUfy0mdbBgUbNsDlAqDP3Nt1V2w7gXcOP N2z1088toFpl+cAwMiyeKHCECBjpJle3gDVgmARrSpH8etnfdN4NKZAq4iYOSi/Y RSSB+RhBSrfMMqELJKfAxcoxkUB98L1tpvGN4UeQPXmzZD+svJm15W9sz71qYtub QR8lJkXCujAyrrg7ffvmfDvClwPP2iMhTXJ7EaiLlQM9rSeE7692/6wO2Vfw28vU lQ/eZdMD1uAU7DDuX5nhp/+dIzMRYtT/ZjlLN7Ou0oK2mjRnZYGgqgHtV7YETO6L 9WI+r1oJ/hT4AT0c+70GUGGOwq6HVp4H9EJxnf0G6vGlcySpKsy+L+Y89P1U2ofn JZfWJbWDLK53ByEh2HqLp2HRVhEwvJnrxAQcRQIC8NgTlu9SJcOZGwlJT4gKE4VY XysSV5lkHChU6ppBQigqj5HzaJtgJnHEXXBQ0BtmJ6yGusYpHn4=
    =f5Tc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)