-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Oct 2019 10:27:04 +0000 Source: milkytracker Binary: milkytracker Architecture: source Version: 0.90.85+dfsg-2.2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Gürkan Sengün <gurkan@phys.ethz.ch> Changed-By: Utkarsh Gupta <guptautkarsh2102@gmail.com> Description: milkytracker - music creation tool inspired by Fast Tracker 2 Closes: 933964 Changes: milkytracker (0.90.85+dfsg-2.2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * Add patch to fix heap-based and stack-based buffer overflows. (Closes: #933964) (Fixes: CVE-2019-14464, CVE-2019-14496, CVE-2019-14497) Checksums-Sha1: 1a682f1c501a67ea6b468b6cd7f71cab441db93b 1996 milkytracker_0.90.85+dfsg-2.2+deb8u1.dsc 061b02f3ad9bf73280160e09e40a6c3af0236bb3 2699353 milkytracker_0.90.85+dfsg.orig.tar.gz 79362c7a468aa64d18737be834246208f352b2e6 9160 milkytracker_0.90.85+dfsg-2.2+deb8u1.debian.tar.xz Checksums-Sha256: d9307e0c0bb44f3229bc25412a5821139f0bd69d13a42a8544f66f24c7efc17e 1996 milkytracker_0.90.85+dfsg-2.2+deb8u1.dsc e712ccceaea4230543101521c99beca3bd838e6d31978521337b416a5c3d22da 2699353 milkytracker_0.90.85+dfsg.orig.tar.gz 91721f09242ec0a418449acde5ba6575958b44943164f7e643c263114db36abe 9160 milkytracker_0.90.85+dfsg-2.2+deb8u1.debian.tar.xz Files: f2b1df3469ae168cc597006ad20d8c0f 1996 sound optional milkytracker_0.90.85+dfsg-2.2+deb8u1.dsc 41aa45ee60c945d515aaac2cfb30e06a 2699353 sound optional milkytracker_0.90.85+dfsg.orig.tar.gz f52e17facf2a7d8ca16655d035a492e2 9160 sound optional milkytracker_0.90.85+dfsg-2.2+deb8u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAl2tmg4ACgkQCRq4Vgaa qhzpFQ//WVp18+U77pHzCr6olpCf+zokO3OTgs8ZU3iwk/IaMUdUgaPhQPbA6mG+ OJh0djf9QpsM86OwImMRxBvPCxMcEnX1Bfv0laxTAFCl6G923T5b/mpwXnSe/3IV Dpom4uA6Htr9oR2bu9D/Kcv+rJ0isnFa7abEPgJHBmR7RbIs4P3hViqIMrWSvpU2 zJO0rRyEpIrKkIovZnYsA3NQ1MAAzQaOqdGr9JK8o0Obz0Izo0Q10hG/vrupahbE sgjZNdic3K7ZstVc5m1Ks+RR6D4ejDEHYne9ZzECTXn/Zu8SmaY5ZYkfRUjF12BQ iHPefg1Fh3AjkYEKeYNUPnwPro1UbcFbDvqDoL4RZRcQC44ikNN+r8rdYvl1KxTz lSXvFtqLrUI1QHcFmJm5WmzLWZyuY6+xF2Oni67wj4eixS+WCIpnXnV3hXv1deR/ 3r/qNtaKeSn+4WiCGKSP0cuM2hYj7y8CWKpjQQbT84e2N8pCKRE8aMilCs1R1NUz q2K8gmfGt2cpxwpRSKK0IOsqL5p3jMdjk+2d8QSIkn7571i5cbPU50tyih/BRB8H g2720+69saHxRx485Pce3a3Ow8mYowT1R1PSroFB+bPsp04qjCEsGaqHOTkn81fn WOaWbhjebIjDYVPzzJMR2mFm32K6HyQNsuP0DMXdDMLJcpU3TQg= =RCFA -----END PGP SIGNATURE-----