-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 May 2019 12:35:53 +0200 Source: libsass Architecture: source Version: 3.5.5-4 Distribution: unstable Urgency: high Maintainer: Debian Sass team <pkg-sass-devel@lists.alioth.debian.org> Changed-By: Jonas Smedegaard <dr@jones.dk> Changes: libsass (3.5.5-4) unstable; urgency=high . * Add patches cherry-picked upstream to fix buffer-overflow and null pointer dereference. CVE-2018-19839 CVE-2018-20190. * Set urgency=high due to security bugfixes. Checksums-Sha1: b50e1971ee353654904e656ff9cadaae6d2ff265 2145 libsass_3.5.5-4.dsc 660cb149f900129da5f54cbd022cce727ff12117 11048 libsass_3.5.5-4.debian.tar.xz 83ae76594f56542607c3790018f9ba35c7b3bda7 6283 libsass_3.5.5-4_amd64.buildinfo Checksums-Sha256: bdd36736fe400ebc84f61e58ea71db971699968190d58bce86e3f20af2c1ac62 2145 libsass_3.5.5-4.dsc 2c1c4bfadddf58c668e901915173602bc82f706dfe98a13699ee8e5c673f0324 11048 libsass_3.5.5-4.debian.tar.xz 55cd8946e94f164ce678a4edafe9491301565768c892500fd2d734e4069765c6 6283 libsass_3.5.5-4_amd64.buildinfo Files: 124fe74542cfbbb5732ee73abbca80f9 2145 libs optional libsass_3.5.5-4.dsc 8154bc0d0da874011a32a6c2d1019cda 11048 libs optional libsass_3.5.5-4.debian.tar.xz dfb7120e80b01045d75d620b551637df 6283 libs optional libsass_3.5.5-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAlzlJ2wACgkQLHwxRsGg ASHF+Q/+JnJ+8RC7EXie+/2OZmjdVChV81HZ6zNMA7ZhiADzPtRQwQpykG01BGBd XEV+4UsVchH/NToweYPitMT18+IgA+IQFT4cih4GUyaRfKYc0hG3PbLzuHFnOg38 Zu+EgpPEt6/hI19IdGpapPW1y6srOBpqeYsWnnk+eryyIq1HUGuf2+eEuV+TzHHX 0ch7meM4BwgqsJCWVJpGhXL7nbIkjASp8B/puOFkhMhvVE5a3aAvQ/E7rlglKxTG FIuSgVPEatUaOAY2EOKZhjOK207ZFc+tYNhm2MibaoR9kz/UZ816dKpquD5qIe6c izd3jxvwk6EqW3pvJgs+I3Rf99FsH9PGKjpMepCJ+3nzthjovovYvRov9oCOQajK UQKnd6ozSPga0POdb9wM5Sh58E/hy4jbUIaCczlayUsUr08GtIAf7HHOkEGMW66G 6baiEaXKMtrqOH3lBXPLGlw7bHRkdD/62pJbP5ZQcyuZP+2l/Nwo3Kx/Th0P1THn B8A04Sx7BxAVFfkltYzVNK6xdjbNb0wQ5K9ej59719rqIZHAtHUb0jjJJkIuk6pf +UMhv5ljEWQ3qXnpYx6GFbz9AkJiE+Ue9ZiMmomUc+fSJscVgiDE1aGXu4BAapIL wzEBLfP9KWGdc4nuElDawZ41WFBk5WY9dsRNX28JneJ667EfhzI= =veID -----END PGP SIGNATURE-----