-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 29 Apr 2020 20:24:07 -0500 Source: yaml-cpp Architecture: source Version: 0.6.3-1 Distribution: unstable Urgency: medium Maintainer: Simon Quigley <tsimonq2@debian.org> Changed-By: Simon Quigley <tsimonq2@debian.org> Closes: 859891 870326 918145 918147 919430 919432 958505 Changes: yaml-cpp (0.6.3-1) unstable; urgency=medium . * New upstream release (Closes: #958505). - Refresh patches. - BUILD_SHARED_LIBS -> YAML_BUILD_SHARED_LIBS cmake flag. - Update symbols from amd64 build log. * Add the following CVE patches: - fix-CVE-2017-11692.patch + Fixes CVE-2017-11692 (Closes: #870326). - fix-unbounded-recursion-depth.patch + Fixes CVE-2017-5950 (Closes: #859891). + Fixes CVE-2018-20573 (Closes: #918147). + Fixes CVE-2018-20574 (Closes: #918145). + Fixes CVE-2019-6285 (Closes: #919432, 919430). * Migrate to using the debhelper-compat dependency. * Bump Standards-version to 4.5.0, no changes needed. * Migrate to debhelper 13. Checksums-Sha1: 1c3c46e2da4e4bd37a62addbb6f6cdfff0452e94 1910 yaml-cpp_0.6.3-1.dsc 98d98632b3a62fdf1172442f8ad8190fc11cbef7 1398768 yaml-cpp_0.6.3.orig.tar.gz b120e27ca45b2e0f03569c8222058a9995dd7a5b 9896 yaml-cpp_0.6.3-1.debian.tar.xz 674944ff77e503f96a91572d84bbf1779de2fff1 7225 yaml-cpp_0.6.3-1_source.buildinfo Checksums-Sha256: a5f7e645c78cfb5addd85526a974266ce7483c61e8cacff72bce03d925eb59b0 1910 yaml-cpp_0.6.3-1.dsc 77ea1b90b3718aa0c324207cb29418f5bced2354c2e483a9523d98c3460af1ed 1398768 yaml-cpp_0.6.3.orig.tar.gz eaad5203b2d53f95017883860dbf595c5457e7fafc4c7ed5dc62abe45644b52d 9896 yaml-cpp_0.6.3-1.debian.tar.xz 096956a8aa3c64dbb32c7ba5f3333dc74f9a8391ba3849704a8bec04ddd1ee10 7225 yaml-cpp_0.6.3-1_source.buildinfo Files: 6a8128dc53ac49e2ba956446aeae937d 1910 devel optional yaml-cpp_0.6.3-1.dsc b45bf1089a382e81f6b661062c10d0c2 1398768 devel optional yaml-cpp_0.6.3.orig.tar.gz 77679e67e83f27757eff8821cee2acd2 9896 devel optional yaml-cpp_0.6.3-1.debian.tar.xz 75f45dc40e73a04c140d77b7fca17986 7225 devel optional yaml-cpp_0.6.3-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAl6qKNgACgkQ4n8s+EWM L6QH+xAAsm75JpeAJ57ivPqTWGVRBQdcu7/LaPViXUuf9jJY6RnhnKEYIOe2l7gN PxGE0pIe1z+nWIixqTt7vXDLEHQO9WDbiE9k6efc+LzOqHsi7R4Sf9xJ2k2ueV3z Ib+j/2WSeU6/+JGLu5H75zGtxxMHad0lXHCRVu8Thu1H6ruI6uJOXE4V5l4sxjfz wvY2XQPcihqmbLI8NdXhedXjwpgih4JZNfb2FJfN8UiQGoaV7BCaNAdeNPLv64zs 5DcZCoIZwHyLQxXm953fFwlMOua5AYTX1Rl9b06wZkuzo3HLn7hqUTrz9b7iC2KO E3jLSBXOZexa5MHpPOh4BtUzOcZUFEBIgNWKnGrNGiLIKkEZsc8vJy1b4OzckE8O 3tj5Tn7v+Wk2WPYq/gdfQ/SP6tcMQB6fIfB2Ap2p0BxOBuhHHksn5fhjtgks4GmK rk6noNg4XD4SfcI+lqiTYBnkZREj7sikBBiqyrRoXiSPJr5jDpgyS6LGVlzrUfo3 zPNXrX8XjxpDB2AkJWYQARPG7p/KDt9Ciyf9iXy0M3tR14GLKv7+ZJO6NZH0KZWu QUzY8TgOh8UDNPjFGKefX16oTsfw2EE+rv66F218hrU0G5TNZ6dQ4RkPR4yz8Wcr q2HOHy4+sSKHSXNf1Hz6uhIlUJWzotlt1LuMCN0Kr6ufyZk0sRo= =tP7p -----END PGP SIGNATURE-----
