-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 11 Aug 2019 12:14:09 BST Source: pango1.0 Architecture: source Version: 1.42.4-7~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 933860 Changes: pango1.0 (1.42.4-7~deb10u1) buster-security; urgency=medium . * Team upload * Rebuild for buster-security * d/gbp.conf: Set upstream branch to upstream/1.42.x * d/gbp.conf: Set packaging branch to debian/buster . pango1.0 (1.42.4-7) unstable; urgency=medium . * Team upload * d/p/bidi-Be-safer-against-bad-input.patch: Fix heap overflow when acting on malformed UTF-8. (Closes: #933860; CVE-2019-1010238) Checksums-Sha256: 48cb653f7a82d8127192e71ca644544f94bac7f882565f40f74b5dbe74c3d00e 3301 pango1.0_1.42.4-7~deb10u1.dsc ceb9b2f2b01b8ab0f46f73078f04ea57805d8106de4369a13b507cba74034d6e 50480 pango1.0_1.42.4-7~deb10u1.debian.tar.xz abcfd798adc216a4922faf1ec962e2ba960e571b0aaa380396e21c45d017aa2e 9405 pango1.0_1.42.4-7~deb10u1_source.buildinfo 1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d 833876 pango1.0_1.42.4.orig.tar.xz Checksums-Sha1: 9d45bdb4ead3cd186963146b7de6f25362d7b22c 3301 pango1.0_1.42.4-7~deb10u1.dsc b1ba66ca8c892646fedb2466e2431f4e434487f5 50480 pango1.0_1.42.4-7~deb10u1.debian.tar.xz 3e80b72b12c5831c18761c426778551520320302 9405 pango1.0_1.42.4-7~deb10u1_source.buildinfo 240942b1307eaa3819e6e534596271c57cd75457 833876 pango1.0_1.42.4.orig.tar.xz Files: 22acf92534038c178d7c712fb61d3f59 3301 libs optional pango1.0_1.42.4-7~deb10u1.dsc dba269476a005296084ca3f56d8f4ab2 50480 libs optional pango1.0_1.42.4-7~deb10u1.debian.tar.xz f03b452a09c73cb159e47c44cd493e92 9405 libs optional pango1.0_1.42.4-7~deb10u1_source.buildinfo deb171a31a3ad76342d5195a1b5bbc7c 833876 libs optional pango1.0_1.42.4.orig.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1P+IoACgkQ4FrhR4+B TE/Gfw//U8Ni4zLL1CuT91pzx8PXQCesCpzLDy1SqZp+iUsD0swbIrk8PV6iimGF jj+ttj15W5oDQbczvF3DkSmO0a51VX96y+ArF4cAdaXYJV7WySehFY5F0znv/Hta dcYq5CRImj3nA4qU5sp520ZWzfpdQzi98xjruEx1yfgXqQMlqzVFQGD63og6DjG7 517SZVlloGQMphWm2WBznTgcB/RTGb8Q0BUm4H2BrX2EN5F9OJjKlxn0Bf+myY+z hvX2knrxsanfRakGzxg1Oeba4XE4cNbXQmA0ymhBNZ3jcXpcEyZTa/gYvqdpDUQ3 Vgt8XmTPHloZjt4JpC0CveqQYl1bmx31cCR7uXKWckvxO8GiCh5xo6/7ETyzwGj8 fQr7d0yiIHUlRPOjBwhha88lWYZrW3669yWEatrje/woBZqWeBxSQ+830XTGaXs9 LAsCZZRfOJqp58fjdpc3JBZnsIgsKjFctDPxw+atV/8rRm5j6d3std9VMJCwCrcI ZEtghhuR0vnl/WaEL9t5NubTrrCcQWPOUIPJ7/nSKDMnB5m0fFNUI7plIEj5o6gx iPe0rxxXt7Hk8w/NW6muHzfq31lW872I1Nnn+q6Io4spGSxlr8HqnB7dz9fe8oPY gXwN+X8QjgyDmbYloBgb/fPAZ+Wpr9diD8TD79DYRRj4idmCHsA= =iYHx -----END PGP SIGNATURE-----