-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 May 2024 10:07:46 +0200 Source: gst-plugins-base1.0 Architecture: source Version: 1.22.0-3+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Maintainers of GStreamer packages Changed-By: Salvatore Bonaccorso Changes: gst-plugins-base1.0 (1.22.0-3+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * exiftag: Prevent integer overflows and out of bounds reads when handling undefined tags (CVE-2024-4453) Checksums-Sha1: 2fd0e172858600f0874f1beb5a1e424194aa5a96 3867 gst-plugins-base1.0_1.22.0-3+deb12u2.dsc c050413e59cbeed67e13c1336a6ae4faac2470d9 50684 gst-plugins-base1.0_1.22.0-3+deb12u2.debian.tar.xz 7778204d9be9d8561be9c2cf97e3660ed1f223a6 7641 gst-plugins-base1.0_1.22.0-3+deb12u2_source.buildinfo Checksums-Sha256: 270caa4fa284bbd74748c18b6189b99b8ec548c3e63bdb5afe1308de8278d516 3867 gst-plugins-base1.0_1.22.0-3+deb12u2.dsc fca29c98155b995b91599841072e23693fb879e029068c4359098ba9a73d7413 50684 gst-plugins-base1.0_1.22.0-3+deb12u2.debian.tar.xz e923e78bd53ee28eb6b45eb9c483af9b53c36c510f7bf5e7b94fd638206f4da7 7641 gst-plugins-base1.0_1.22.0-3+deb12u2_source.buildinfo Files: ebab5043ee63a10f46e5b26449010ae8 3867 libs optional gst-plugins-base1.0_1.22.0-3+deb12u2.dsc a3a6db516ff73e1e275ccb7c5f1f8a0d 50684 libs optional gst-plugins-base1.0_1.22.0-3+deb12u2.debian.tar.xz 16e6d6f88b10cb43b95e61092754bebc 7641 libs optional gst-plugins-base1.0_1.22.0-3+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmZRnKRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EakYP/iJBsrRtrgqXLjDcxoJk1/g/xBsQjWPA kg2p4fDsaQyOboDGnYPFB23F/WX+c03ctzdg4wy1Xfj9DMPE2rczR6Edj9XX7fYS 6IuIroZFiEZvA4wJcUCnymtM6VN88ka9bPW5rAd60eIfBAyScZFJDAf/o48N9Wqf QjA0fZ59RFtQupi4BMzgTs5CnYmcEsPDTexVeIncP/J7HpEWIee/uC0NQXVJvPkw BkD9dKMWTpiFEO+NGXzl0xQ9kF33YKW6IouaAaH4Qz0kc8TcWyeziokUN4Bbh3U3 YF+HrTO3dN5isv3ApMEg5Ls6QNt41CZTlBclxQY8UsCQ+yHhjOwvQWFmKvoebW+1 mzSc1lYEvwq/XKfsT2BqvfAWjSu60H7A/TZdNwOiP8f45dFfrRTwvps9viGKfurs 9Syx/NTa2OaqLauQEHLqjU9Jfi3v+0K8we3esVbffmqrnhqWDTr0MIz8DEocR9Xt zZCkfN7iPc4ZJZlqKKjoK15et8UqQe9smrw6uX8mWGXxTGcuStqlJKTbTAfVc1bD SC28bTw46LYBpHZr/nyonX/SqX7R3bFvowOHBLgimCI8gr2de1Q9moAGLVrJh3L0 VeNzU05FZFGXt5W3bqa1xymWZsu9sg6/wNajSVkib/vsW75kX64OOL+2JFs01voG 7ySekxLZFr8t =F0B0 -----END PGP SIGNATURE-----