-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Jun 2024 23:04:36 +0200 Source: gdk-pixbuf Binary: libgdk-pixbuf2.0-common libgdk-pixbuf2.0-doc Architecture: all Version: 2.42.10+dfsg-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: libgdk-pixbuf2.0-common - GDK Pixbuf library - data files libgdk-pixbuf2.0-doc - GDK Pixbuf library (documentation) Closes: 1071265 Changes: gdk-pixbuf (2.42.10+dfsg-1+deb12u1) bookworm; urgency=medium . * ANI: Reject files with multiple anih chunks (CVE-2022-48622) (Closes: #1071265) * ANI: Reject files with multiple INAM or IART chunks * ANI: Validate anih chunk size Checksums-Sha1: 813990397b120976b3eafe93d6601f5d676a971d 8780 gdk-pixbuf_2.42.10+dfsg-1+deb12u1_all-buildd.buildinfo 77d1a8dc967f068ed9258d23996a849605443087 306380 libgdk-pixbuf2.0-common_2.42.10+dfsg-1+deb12u1_all.deb 2ed66a327bc6332ccab8f08f04f9f8781180e6c2 265208 libgdk-pixbuf2.0-doc_2.42.10+dfsg-1+deb12u1_all.deb Checksums-Sha256: 1b5e69552eb8a5cfb2df2574791da2a3633ac33d976f671cc05ca4c8fb421faf 8780 gdk-pixbuf_2.42.10+dfsg-1+deb12u1_all-buildd.buildinfo dedd26c1d286a50970c89694dc5af400f2cc76e83ea39eb5e91bd297985acd46 306380 libgdk-pixbuf2.0-common_2.42.10+dfsg-1+deb12u1_all.deb db20e6bb196cc5c44e15fae0b4a1ebd8a3ea103488dc1ff071a0a5264a624f6b 265208 libgdk-pixbuf2.0-doc_2.42.10+dfsg-1+deb12u1_all.deb Files: e3d20fecf556febede5101f95935b9df 8780 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u1_all-buildd.buildinfo d293c2e8cbbac4086933383fc411ce54 306380 libs optional libgdk-pixbuf2.0-common_2.42.10+dfsg-1+deb12u1_all.deb d9896920f205a5a0c48e97349965bbac 265208 doc optional libgdk-pixbuf2.0-doc_2.42.10+dfsg-1+deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQsM0t1ygJv2xcx3e4cagXJhOTXsFAmZ2rXgACgkQ4cagXJhO TXsh0Q/+LvqFUkQCl7ho0Vvs7ZhvV3sYEAk3uHzTMBm887IoIRWsq3zozsLZkEPm ktMp6SPBSSe33aG711+NUft56rSPUuXV59ZuMtMEHOsMr6l0Gz1quaDJH6PRL6HX koEBnWJrzTNgetiRNvGHWeNjwWiKebNu2ZekIY4/m/u7ZIMQiWLNOd9eNuKXzctc 9xq1o+QcChHq80Oh+PHd6B3Dj2L47medj5gar81xp33fdhjixG4ha5k6LTlA9IzZ bNalEmKc3LQJ3CuAQNpL395rN91dwZMBLRn3AMeKCitfJEL9y/iluSRmUAcGWZ/w zw7FBAVp2EsnoAVNNc423FUgrDVELVYt4WBvSXKeNnPRKCX8cVhTfjepCw4T1zmq B3rAgYm0ku3mN6MiWPfSuvi/hGkg6iJN45gb417o/yIoHphDYU41jozkNcJr+rpx fldk/XTR8YDTAw0WhBYygHSsO5hRhlwKUxgEfz8GL4vr4lOsftOqrywP1C5RZjq2 x6K9Mo4qQZfdbwIpYFOsym0VDp82xTHSHsQr7zolSJT/GTLQplAVywvSiGVBJCpr 4S3nsDlTjIQjXipKj1tgZRwDKiNPuMbJzR2EhGrw7fVnyGp/7I7Be5KYkna3wNA2 UV1TBQdnpKremHNV5vR/f8fJT7oNq35VezGx0znok30iJ0azspQ= =UUj8 -----END PGP SIGNATURE-----