-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 02 Sep 2022 20:01:56 +0200 Source: gdk-pixbuf Binary: libgdk-pixbuf2.0-common libgdk-pixbuf2.0-doc Architecture: all Version: 2.42.2+dfsg-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Salvatore Bonaccorso Description: libgdk-pixbuf2.0-common - GDK Pixbuf library - data files libgdk-pixbuf2.0-doc - GDK Pixbuf library (documentation) Closes: 1014600 Changes: gdk-pixbuf (2.42.2+dfsg-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * gif: Check for overflow when compositing or clearing frames (CVE-2021-46829) * Add an assertion that checks for maximum LZW code size * Fix the check for maximum value of LZW initial code size (CVE-2021-44648) (Closes: #1014600) * Replace GIF in testcase which was broken in the LZW code size, not the values of the pixels Checksums-Sha1: 48754befa2a2d80b1af35980919f7612a4b99a72 8615 gdk-pixbuf_2.42.2+dfsg-1+deb11u1_all-buildd.buildinfo 5730d3dbc5d8ac99a107f84b53c3d781f99184d4 319888 libgdk-pixbuf2.0-common_2.42.2+dfsg-1+deb11u1_all.deb ec294cb3abe3fe448a857260c19bd4fc5f47a86a 173128 libgdk-pixbuf2.0-doc_2.42.2+dfsg-1+deb11u1_all.deb Checksums-Sha256: 58a01a78caf7138f203c1e101e1ddacd04d83f805e9959edc5440c39d616b542 8615 gdk-pixbuf_2.42.2+dfsg-1+deb11u1_all-buildd.buildinfo e99738118ad4a63a4cfd7e34006fd379dd850b9527ec464a104b178a5038b5be 319888 libgdk-pixbuf2.0-common_2.42.2+dfsg-1+deb11u1_all.deb ddceaaaa3a7ae4ac3b0725b9ef2df03e3364aa725a5aae1e6d363cdb850073be 173128 libgdk-pixbuf2.0-doc_2.42.2+dfsg-1+deb11u1_all.deb Files: 87f277d754060fbaf9074f0368c2025b 8615 libs optional gdk-pixbuf_2.42.2+dfsg-1+deb11u1_all-buildd.buildinfo 968ad04953bb574627cd52e0bf93e635 319888 libs optional libgdk-pixbuf2.0-common_2.42.2+dfsg-1+deb11u1_all.deb 1f26d8df1ebab01337863d12a886fa1c 173128 doc optional libgdk-pixbuf2.0-doc_2.42.2+dfsg-1+deb11u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEEfeZ4tM1TNG7DMXxJGSMJV360gIFAmMSVD0ACgkQJGSMJV36 0gL8DQ//XzSQsA7ec7rxLTgLmSotnmOu8D65THSR12R23MMQ+tJM3PeoP9M38y14 a3xfl3TRLsQo5Oi+cENCM75mPhbeA9MxWJGugaKOCzPn41P4Iw2cpncZyuOn1HZt I+3PU48SiKbAnJjkmqB/1g6GrqucOZjoVipcGrHMIQUVNSsHaEK6ejjeq0Qs6M7z 1XHR5I6X6XfwFEHARPILpqolobPRnLpOOIqFVL4oHJ/zRJultwu/2Xh1H1XXhS8R puqKSTipSF2grSyHlkIjxtqJ2huYS7GtTiAV2kqkrmcjaOItjjhtp5iI6Q98/oRI mR1wZMyczgAYxkpECGNdT3AYDhT/y6mN41l80/gao8zCEuPTQrj+10Z7r6M/+nBc kJdRj2z0HmNNfyssXdZvQwipXxs9nARvaExyv/aG+O1thntizUmZLM/Eny/tr5JX FNOUoG/PymqlKpaFdbDBnFOyUIvyKKu+3u72QlHOdBWsaQ/mYYgm+5e9JDvVwf/3 NGp7zgI1DBRnCvxEbLu+EGuewmXPqngio5A5ONR3CGrfrQ+FakfaMzlx7WjHEOv2 mzlE3q1SGqwQH5uh6ezgHZx4WkfZcMx1Y4HDkpFSp6leR9s98Z3HDHeRYIGNGKwW iKoK1Bn1AAOJiT/cOjlVmO4tZi8Xmta1Rbiu0NjmTCB7NZNAEUI= =FjHx -----END PGP SIGNATURE-----