-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 31 Oct 2021 00:14:41 +0300 Source: libsdl2 Binary: libsdl2-2.0-0 libsdl2-dev libsdl2-doc Architecture: source Version: 2.0.5+dfsg1-2+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libsdl2-2.0-0 - Simple DirectMedia Layer libsdl2-dev - Simple DirectMedia Layer development files libsdl2-doc - Reference manual for libsdl2 Changes: libsdl2 (2.0.5+dfsg1-2+deb9u2) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2017-2888, CVE-2019-7637: Fix for a heap-based buffer in video/SDL_surface.c. Checksums-Sha1: 11ed0b52a768b583c82d60fdf01d368ade98e8d8 2727 libsdl2_2.0.5+dfsg1-2+deb9u2.dsc 4ef70d62a6e3020bd208385ea66b5ffae315cd7c 1668828 libsdl2_2.0.5+dfsg1.orig.tar.xz 59259102695af665b5e3757a2ae8b5846f69bd41 19672 libsdl2_2.0.5+dfsg1-2+deb9u2.debian.tar.xz Checksums-Sha256: 78c6a2a9a7a0b9499c560081c208bb855cc87cabc4a94db57f392b078fd9445c 2727 libsdl2_2.0.5+dfsg1-2+deb9u2.dsc 73b893f95eca1f5704a3a17d5440c342b4f12609b47ba661f9169b97e84c08da 1668828 libsdl2_2.0.5+dfsg1.orig.tar.xz a8f6d3793d6d78c57ed672e13538773aa714ca7d6100a59bc79457b1a0eef373 19672 libsdl2_2.0.5+dfsg1-2+deb9u2.debian.tar.xz Files: 35f06205c38a7bf540c59b5920602022 2727 libs optional libsdl2_2.0.5+dfsg1-2+deb9u2.dsc 36a2950cc3628b0d8d7f959a1b064789 1668828 libs optional libsdl2_2.0.5+dfsg1.orig.tar.xz 47ce77e31927f31ef0349639019b912a 19672 libs optional libsdl2_2.0.5+dfsg1-2+deb9u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmF+QJEACgkQiNJCh6LY mLFMYBAAqZGMtzz1APttaz+yMixvlW5qrm1Eh+CRUXLIOPNreUcqOQAfbsY/DiP0 HvUB5+Ch0rmCLvPZOchWA4BhA08AmuUC6ryevyl2KE9mDuF8Qm6hngLTwlIKvkWS OGRypuwYee6LyYYI7TEMFAgZePMUStnnixLKoJU8vi71F36fzayHgRm7/fV7aMp2 TpXomvxHBS/dgZhUdb0GXFkvO67q+ltkXHLu9G+hBN0wmYaXQ0KmeLJcX9fB3lXz 3xCV2GxXv8OgciC6gkIxOdlwNyW1Mmayf5VBl9gK1lepqQsYwzpIMNq3tcdL+Hkl tCxTyRZdVgxwfptlNDAlcEVkg2SkDxsFkJmflJ0q77nNqeVNNRtnf3FIh/cxCizE uP2OCehCNclBncqLoskrbapfZM/SiBvSCf4i2aRKzehWhoCodZwUKTRHxJDa7YpJ W5S6v6SnVfz1rOl/zZPrv+O2mXmUPUE9B4qu/KhfTHVmYGWarXznkH3uaktHHpSP RnrfImc+JePk4rCPQkjcZQ87lSvqYh8GaESaGPgrJHZimQEMVFvPIJva50gLkTOD GBvdtdKZ2RBht+9/duFsFS1fEm26Kjni73zRoO6qVgTNw0sCuEK2nkWKho14P61y 5NtkuZ6RVmoWLF8liFyf3jD03MF9k3nE7u0QQ6hQW1au5E4xSSA= =sAdJ -----END PGP SIGNATURE-----