-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 28 Jun 2021 09:55:07 +0100 Source: htmldoc Architecture: source Version: 1.8.27-8+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Jeff Licquia <licquia@debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Changes: htmldoc (1.8.27-8+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * Add patch to fix a buffer underflow issue with GCC on Linux. (Fixes: CVE-2019-19630) * Add patch to fix crash bug with bad GIF. (Fixes: CVE-2021-20308) * Add patches from buster to fix CVEs: CVE-2021-23158, CVE-2021-23165, CVE-2021-23180, CVE-2021-23191, CVE-2021-23206, CVE-2021-26252, CVE-2021-26259, CVE-2021-26948. Checksums-Sha1: c17977a0bd34efebe774912f7bab937f7a884fe7 2005 htmldoc_1.8.27-8+deb9u1.dsc 1dc2603983d7ad7024cfbeab7a0c7fab2230cf8f 4462252 htmldoc_1.8.27.orig.tar.gz c0b9343a7781355ede0855d3e9b3a1b9e79a8ee4 12020 htmldoc_1.8.27-8+deb9u1.debian.tar.xz dd6e330ce02a83fa6ebfe6a93fbe03472a66af07 6155 htmldoc_1.8.27-8+deb9u1_source.buildinfo Checksums-Sha256: 55a794406d16a61f0231b0a0f21856fc141787365331fb91582462b32e3f4515 2005 htmldoc_1.8.27-8+deb9u1.dsc 64f6d9f40f00f9cc68df6508123e88ed30fef924881fd28dca45358ecd79d320 4462252 htmldoc_1.8.27.orig.tar.gz 72c43a871beb95dfd6ae6e2a736710bf7aab1e9c3b6e2af3195e7f226de9bb46 12020 htmldoc_1.8.27-8+deb9u1.debian.tar.xz adfc73714a52dac2b576cc3401c5c9dcc8046a3d173e222571af52c6084db13a 6155 htmldoc_1.8.27-8+deb9u1_source.buildinfo Files: 049a04e2006604d9200ef330fa60a832 2005 web optional htmldoc_1.8.27-8+deb9u1.dsc b284888cc2285b32e96cbce620b927c1 4462252 web optional htmldoc_1.8.27.orig.tar.gz d4b26e0d5d09bcc0f1503fa48d7f88b1 12020 web optional htmldoc_1.8.27-8+deb9u1.debian.tar.xz 1c0250de75b32d26b00675d745fac944 6155 web optional htmldoc_1.8.27-8+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmDdCpETHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlv0vD/0RCZ+nSKDu18o0+2JplrpeYkg+UOaE KYNh9fWB3TjisR+pMYrjoB1wYY0YLXMn0q/MZ1wctwsbTAfHC7bu1d+YqwltkV7U jXzJsyaT9p6cztgl6cIEwjxAF0cj42LzRM8Vz/DufFeJbixGVvmO7XUixVf2h5Vg txCD1AbmilkRG4tvtEAizPEx91pcwxT5A1vE2yVDEscBCHz/Z7Z270GazdLymNAw vVJvokV8skEBMtg0a3a4Qfwj8GP0CfWDwZKnvsHqA9vX6M3zBaAdgKl4c0oCVe/c r7I1R+jOsJhiOpAAxp13Trt+xA2UXbr3lKsKXKTZxcLylMR6Mb1ftO0U0I0Fo9Qc ymM5xHBzF2k7fp07n3SxYdBPls0IfcpYbMB0WVtzjt3TzK6yfXbxwwR9WXcJEsYR 3x6ucH63dqsqRuMC2jWYs4YQD6zLN/7/XZMd4c0uLCVSIPDtl/zpG0xUSqbn8LrW xfausn3myiD2ks68L1wH/hMOtvU8ebG6WCI9sXsEweYIfB03x6uyJBc/jIMcSGWb rBJr+UDY3bU4hcah6gansBGUQgAhd6R8Zke+TP4oIUlddB4Puy5JdZ5amPYjQ3y7 OmRDxnEPgRdXKk8qBLT0ADCJM6Awb+Z6L1iYUA27su91XbpHutVvPRh2OL5qn694 VZWga3wX+QkPhA== =RDsq -----END PGP SIGNATURE-----