-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 03 Jun 2019 23:16:42 +0100 Source: gnome-desktop3 Architecture: source Version: 3.30.2.1-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 928732 Changes: gnome-desktop3 (3.30.2.1-2) unstable; urgency=medium . * Team upload * d/gbp.conf: Configure branches for Debian buster and GNOME 3.30.x * d/watch: Only watch for 3.30.x versions * d/p/thumbnailer-fix-incomplete-TIOCSTI-filtering.patch: Import the only non-build-system change from upstream release 3.30.2.3 to fix incomplete TIOCSTI ioctl filtering, which could be a vector for privilege escalation if a thumbnailer with a security vulnerability is run on a crafted malicious image by a program that uses libgnome-desktop and was run from an interactive terminal. (Closes: #928732, CVE-2019-11460) Checksums-Sha1: cd11a01210ec26d2c92a44046fbf5b84652c3b45 2737 gnome-desktop3_3.30.2.1-2.dsc 2b305432a8083c995a6a3ab90ba238845aeb3dd2 23044 gnome-desktop3_3.30.2.1-2.debian.tar.xz 8534db8489941ad1978f55f006930e997d9fd627 15615 gnome-desktop3_3.30.2.1-2_source.buildinfo Checksums-Sha256: f4475f97708c8ce90facaffeb0682a28a3094ad4f6f9d0fbb0ef610637de4477 2737 gnome-desktop3_3.30.2.1-2.dsc 54326165ffd58f249af669686b2e29ccccbe8ff57206258ba4a7d8de212b7d7a 23044 gnome-desktop3_3.30.2.1-2.debian.tar.xz 814ef2c847ed1790ad2e8605c98fee11256812320b9b99364098a7c94baeba25 15615 gnome-desktop3_3.30.2.1-2_source.buildinfo Files: 39742e039dc73924d6cbd8ab65a77de4 2737 gnome optional gnome-desktop3_3.30.2.1-2.dsc 0ad79c36d8c5f4e4de156e96394c0bba 23044 gnome optional gnome-desktop3_3.30.2.1-2.debian.tar.xz eebe2c8805ed63156b51310246624295 15615 gnome optional gnome-desktop3_3.30.2.1-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlz2LwcACgkQ4FrhR4+B TE98FxAAk0V3vIDPRZPpTPveAqL5QqVE9NIiUNzLiEbxvf41qg8zXDnm0xpZ/1EX shDutC/qqz0lZpndG5RadEqHxBjmK2M/muKNnyyzoPYXbxvYcuFg91JHNMbfVu9I vqynMQGncSQn6Cku/R7sr3NULsG1oIecZGAf4avCDe5/HwuSE4K/TAXaQWACGox6 0YB40IqlkXJcqBRCTsIKhRPeXG5XF1tfUZlhS6lS6i/D2oevv7gLXwDaZVfeQ/sM FCtZb6Men3jXOAu+/Mjq7rSHJE+vOtO0F1kcWLACSIEuhmG6Hl6i89EhAKNyR8Pc NW+d2EPCDaM3HXAUODUr8cfLIC7wHav+MGhfNXLdHuvVrouz86eR2UX1IDeVzpdV 9JWrAOBRWxPzb+wacW+dj0WUV8i9J/V3yKRB2lS/f1ZDXS5Ilr6yRSHckeAXjYLW 0EFH+MyGgAOrLdXws2zMceXb91x2+MBs8Ynq6j58u3bxHrVVVyO3WDRWzK1BZMEJ uO3UcP3vwtDrx6i2Q6BODolXdX9wZdULTbfupfG1o0/7zD/m5RwN8HC8ODYiieFS nK+OnHcAAlwdmtnKjvJ6Aj63cbYrozRgUnudk/Hm9n1oPq2vYxAtiVXG1HNxYuMY nliGuUGi4tj+GItmsJPvP8nPb6lEvYzEHn3GF7UqcfRaLu9Jydg= =cTOc -----END PGP SIGNATURE-----