-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Apr 2020 16:40:07 +0200 Source: janus Architecture: source Version: 0.9.2-1 Distribution: unstable Urgency: medium Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org> Changed-By: Jonas Smedegaard <dr@jones.dk> Closes: 954668 954928 Changes: janus (0.9.2-1) unstable; urgency=medium . [ upstream ] * new release + fix rare race condition when claiming sessions; closes: bug#954668 (CVE-2020-10577), thanks to Salvatore Bonaccorso . [ Jonas Smedegaard ] * recommend recent libnice10 (beneficial e.g. with backports where inferior version may also be available); closes: bug#954928, thanks to Roberto Guido * fix recommend lua-ansicolors lua-json * add TODO about enabling tests * tighten build-dependency on libmicrohttpd-dev * copyright: extend coverage * unfuzz patches Checksums-Sha1: 0beafa771feab64078e76c32cc9d98de174f8bfc 2756 janus_0.9.2-1.dsc 843991d9d9a1c3e6585890e03c86bff3c946c293 6275157 janus_0.9.2.orig.tar.gz b257db76cef61a078040f253ca254835769e5cac 16308 janus_0.9.2-1.debian.tar.xz a64fd2d943e39e8c738a20331a949a1ad3161203 17047 janus_0.9.2-1_amd64.buildinfo Checksums-Sha256: 8c3520b2c2957682db983fe5d4ca103505d188b7247385868767e3965f8b9486 2756 janus_0.9.2-1.dsc b6829edaf25862fbf613e2c3d2be7cad29943c0bb1ea5d1b935a07abfee37245 6275157 janus_0.9.2.orig.tar.gz 8f8405e3e599dba58329a599d427dbf32a3c547791f6574570ccdfcb1f6394ad 16308 janus_0.9.2-1.debian.tar.xz 8f748c993f542d47ea90031a84bff8c11c2510495a1d0ce9f62789864b0db2c7 17047 janus_0.9.2-1_amd64.buildinfo Files: a84d2a396e3793dd27d07ae2c1f5a490 2756 comm optional janus_0.9.2-1.dsc f239a8084a0e21110bcdf4e1b517e490 6275157 comm optional janus_0.9.2.orig.tar.gz 4f490b0f24d9b4d46bd8f450a52c548a 16308 comm optional janus_0.9.2-1.debian.tar.xz a7818ecbc3f8eba4fdc64f81497b5400 17047 comm optional janus_0.9.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAl6HTR0ACgkQLHwxRsGg ASFdSA//RlB2CvwaBGRFGXlPVdy9H0kHWk68wlLPfKkJRN8PH3C6FjqF+G4OsokI HktRbTlEMZ7PDXVPEsRkaID8Q13mx4gewJrQGwNFNYDsKaS7qVzIUns9AqjxA2f0 kqwdozkiMfFD9R6hLtlh/NmbZAfv+PZ9KgEbKLaLY4UHEMRfUabaCzY8ai4NLNx9 uFxZae2yz7Y5RuNjJQorvMIP43EhP1IQWo+zduk2pH+MfbYfUL4q1Avd6IZk2yG5 S9OjkDCY/9la3A58/9V8u9eygsa2vGsTHHhJvB182HOpuctlrhe1iWQlQpapbwBz cSYlkRFgnD2AZoauTeyrWd9mu5JPrb31F+s2xvSYvP9PjKfLqOQp0y+kWOO7Oi9n lZYlhwlCUWb6U4mDHg85xn0KVhg7RFQxehMmAO6gva24R67w3IGfUZ8OcN1xRS3j 6N2+HBZeSY/6l4HGUeIikbl/FXQuqFjs+05c7ib2n8JhuEf+qcuI60TcoqLuQcRN KlVAfR57P19IAG14hEBZhcZUDRknPDB8aYYaGVos/YGM9AJkKfRzk31RfO3YRjR8 MGJHYNnFTIcV/vnOlYwGvA9PEy+CHCvS/1RhXlMxNTQRXQH2zDgqGT0b+7KkbAC4 R1U9S4kn2VjfSCFOsznkKvpRcZCAjBVR4W2MCUoHNYaVD6Cfh6Q= =CXRJ -----END PGP SIGNATURE-----