-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Mar 2020 02:40:14 +0100 Source: libunivalue Architecture: source Version: 1.1.1-1 Distribution: experimental Urgency: high Maintainer: Debian Cryptocoin Team <team+cryptocoin@tracker.debian.org> Changed-By: Jonas Smedegaard <dr@jones.dk> Closes: 954959 Changes: libunivalue (1.1.1-1) experimental; urgency=high . [ upstream ] * new release(s) + UniValue::read(): Clear internal state upon error closes: bug#954959, thanks to Salvatore Bonaccorso; CVE-2019-18936 . [ Jonas Smedegaard ] * Compare with json-spirit in long description. * fix have libunivalue-dev depend on pkg-config * declare compliance with Debian Policy 4.5.0 * set urgency=high due to security-related bugfix Checksums-Sha1: d9af6b5d845bdb892fd37c32b6f1039581711712 2065 libunivalue_1.1.1-1.dsc 9a596601bf827bce6391636f8099703ff00d64c1 20281 libunivalue_1.1.1.orig.tar.gz 3c51df71fd1e9f461fb2c15c9e1e490ac0d54d28 7316 libunivalue_1.1.1-1.debian.tar.xz 19144e3d82bf5472c37ec2ba96fed35f36d540dd 6971 libunivalue_1.1.1-1_amd64.buildinfo Checksums-Sha256: f4de1d00c837f4381442ad48f52262043e64d3a3f9be09340a93f4b66bf1c100 2065 libunivalue_1.1.1-1.dsc 72760ce6cdaa7b3cc1d47c54ca3e3f494d213084796b4c7694c4aba85a447db2 20281 libunivalue_1.1.1.orig.tar.gz 40e086b3b3c0691ce23aa6e630d81ccba71c8252ec7cc38e1271e160df5cb8d6 7316 libunivalue_1.1.1-1.debian.tar.xz cd5ce97a7b1214fdf9388037ad55b6b1c8de4a780f4f185cb75b757c004475d4 6971 libunivalue_1.1.1-1_amd64.buildinfo Files: 77885046be632b176de15996b1a9dbfd 2065 libs optional libunivalue_1.1.1-1.dsc cbead9079b14837f91513d0831e38d5d 20281 libs optional libunivalue_1.1.1.orig.tar.gz 5caa0f7cf64f9207dcdeb9634aa1295f 7316 libs optional libunivalue_1.1.1-1.debian.tar.xz f055821727e8dcdc549a147382f1b387 6971 libs optional libunivalue_1.1.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAl58CK4ACgkQLHwxRsGg ASGRHw//cmeNRkcFdUDoTQDSdKQILknPIs7pYBLiIyC5h5TF0A2NIYoqr8wywT6W 9So4GkZL8Wa4HzE139BFkd2+C8YPRMbvnn2F0i6wtPI4lVOdiqwxRWU9M2tyxJoi FmsVJL22J40HGP/N1q6NG4nWUe+7hkYFoUoen2vgOFo69tc6dKzVQI90/OxPNfty xBsOMh6Ov7VKjPqfW6QuLwIVpjNcOUxFXDlBJ9OAa6g594SXeIgtydxbQ7Xw2F+M xDZCyPHttKtHeoMhalOiBT7Ln2Vy9soh5JxAgW0Y3mhOGNLeka2J63vk3nQLcDyh 6Y5a8sjyOnEaCglBj6eNCN4jRndbZG4Vf5sR1oTl5GwPZNnJrC0ZUz4PUEFRs/1T IUrZhJDMYz5x1WFaGNm26U8Uko/7Bq+tBnjcBlD/LcWXw+HSgKp/r+0Ai2WXZpdW QBD7Wo4OFx8Q6FXVg8akCgLgmk4Dbz9HIBSv3hbOqX+atpandImUAKb8E2+LOcKJ Hap8PXgjOzwh7hrAOZ0i04qmbWU0dmhi0tisOomE3MoB33OhbA9c5r/IZZTMHUy3 pC8BGGZ+zhZZ9lbvOTPHYJ+JNDRiVbxWHMtS78kPay/eIcOfnZCnZZJoZgfB4i7f l19falNiWpYNkM3TYj4Rs59guS+atHBPLryc8btgy+CCCJIzZr4= =Spky -----END PGP SIGNATURE-----