-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jul 2019 10:39:37 +0200 Source: libonig Architecture: source Version: 6.9.2-1 Distribution: unstable Urgency: medium Maintainer: Jörg Frings-Fürst <debian@jff.email> Changed-By: Jörg Frings-Fürst <debian@jff.email> Closes: 931878 Changes: libonig (6.9.2-1) unstable; urgency=medium . * New upstream release: - Refresh symbols file. - Refresh debian/patches/0100-source_typos.patch. * Rewrite debain/watch. * New debian/patches/0105-CVE-2019-13224.patch and debian/patches/0110-CVE-2019-13225.patch (Closes: #931878): - Fixes CVE-2019-13224 A use-after-free in onig_new_deluxe() in regext.c. - Fixes CVE-2019-13225 A NULL Pointer Dereference in match_at() in regexec.c. * Declare compliance with Debian Policy 4.4.0 (No changes needed). * Migrate to debhelper 12: - Change debian/compat to 12. - Bump minimum debhelper version in debian/control to >= 12. - debian/rules: Remove obsolete dh_install --fail-missing. Checksums-Sha1: ce9c2c348994eaef2524362cdba950a0bf7ba049 1854 libonig_6.9.2-1.dsc bccc4ac69c91093f4894cf4564f1320b8fd6e97c 565087 libonig_6.9.2.orig.tar.gz d46fe258b44e9dd0decf81f0f5d2e4dc0bf772a3 9132 libonig_6.9.2-1.debian.tar.xz 1efca047f69168c6f07a960303e59b09e6ae6f53 5593 libonig_6.9.2-1_source.buildinfo Checksums-Sha256: a8bc665364e88fa10608b06fd2e2a60bfa7fd40d7d23c7fda3620ef830c59ed6 1854 libonig_6.9.2-1.dsc 3b568a9050839e7828b2f2d5bc9cd3650979b6b54a080f54c515320dddda06b0 565087 libonig_6.9.2.orig.tar.gz 8329dcaacd557112cfe8ed69b0e76aa7957fa8bb0e4c9fd869a5ccc1566b7d35 9132 libonig_6.9.2-1.debian.tar.xz 428631d650e3efea14e5504b64f23da69c0257e4f14c1c890966f4ae18e1a6c3 5593 libonig_6.9.2-1_source.buildinfo Files: e30e3ccd25b9b89bcda368ee511623a0 1854 libs extra libonig_6.9.2-1.dsc 36725b9a0417ff377a6fee4cf661ae0f 565087 libs extra libonig_6.9.2.orig.tar.gz 493ca462881dfd2b488b1abfdd6c5ad3 9132 libs extra libonig_6.9.2-1.debian.tar.xz 864b8e7825bae72eed348af97bab881b 5593 libs extra libonig_6.9.2-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEkjZVexcMh/iCHArDweDZLphvfH4FAl0pr4MACgkQweDZLphv fH5BUA/+IR2kFhLaa/GzN+sIsSVEcjC0RSoprZbHCBMgoQyVVj7nnAhonZTa+R78 P9PbQjQYbN0MwBE0CML+ZJk76Z8N5t3gXCAVPJBN/WCqcSRzP8m7bqLhAvDiG41/ yIlpR4HvLzksxCkOrotMmmQrE49C2pQR+wZ530YHO19rDkxuJ66/iQ1DgCiZ95LH LJEsLZFjVAeIbq9Rz9njiVuSl91KCjIjJbFVpRrVoaWPvexHZkOlcH6s0G6saKdC rI7dHLa3Ms9rp9akCz9NNzrkSnudmkmri1Ttc/KKYzNN2T65XLS22ep6vBeMzBKs SOsjLUnsdG4p4fev5MH9fBH96qi81S+SLXQFXIuVQ/JXlI6qJvtg6H67epxrquHh Xxt8eF1n4wEWDl/txkcYvqByI6zOWnhtOcGJuS8GLykP3FCGPBCtwDgWPV7B8kC4 OJBv00HK+jRHHjk0Soav0sVZyf8voqnnREmTlmUb6LnhP53ORJEjrS+JNkONGYtT hlTpfPtMUrtu3BjGRJFWnmTdupv/33isdAMUM5khaHsfj6D4TApBsp7SyDrN4Gsk fWcHDtbRPtEcVJPprltCklYnTgNbdjru46GfCuG/wa/lyfzCIydVrGDdLMsCTtTP 2xiR3dV0lJ3zaDm7B4tJtVeJL4LsQJlIA1Hfu3Vgmg0BlJpTV+o= =x9R5 -----END PGP SIGNATURE-----