-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 04 Oct 2022 00:14:59 +0200 Source: libconfuse Architecture: source Version: 3.3-2+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Aurelien Jarno <aurel32@debian.org> Changed-By: Aurelien Jarno <aurel32@debian.org> Closes: 1019596 Changes: libconfuse (3.3-2+deb11u1) bullseye; urgency=medium . * Add debian/patches/CVE-2022-40320.patch from upstream to fix a heap-based buffer over-read in cfg_tilde_expand (CVE-2022-40320). Closes: #1019596. Checksums-Sha1: 627a10fb71daedb1cc75af6126507e45489bfc25 2093 libconfuse_3.3-2+deb11u1.dsc 176e4a48e8cddbb3a169d7fb75fb7a21a6998e3f 7580 libconfuse_3.3-2+deb11u1.debian.tar.xz 18570118a6cbf2835f606af78b04eff883ec7271 5723 libconfuse_3.3-2+deb11u1_source.buildinfo Checksums-Sha256: 5fd6337ea24f7b405f69d0bfe07a08f3a459d921f9a70b3936bb74ec735f1ef2 2093 libconfuse_3.3-2+deb11u1.dsc 2029b5ed8c8d1888d63b4b4445249ceeb5f687af006d3a2ba32259d8225810ea 7580 libconfuse_3.3-2+deb11u1.debian.tar.xz eaca798b673f9bf5088bfe89c04ad61a127059ccc3c7a85f4c9048bae56b679f 5723 libconfuse_3.3-2+deb11u1_source.buildinfo Files: 020fb2b834459318ea07ada5947cbfe8 2093 libs optional libconfuse_3.3-2+deb11u1.dsc c186ed801ab7d62cb21f056a3abc8c3f 7580 libs optional libconfuse_3.3-2+deb11u1.debian.tar.xz 7ad17b0daedfe69fa23fc43718aa3bcf 5723 libs optional libconfuse_3.3-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUryGlb40+QrX1Ay4E4jA+JnoM2sFAmM7Xx8ACgkQE4jA+Jno M2sL5w/+OasB7OndLP4dj2bd7eRoVJUwb+AuXIu/wkjyVteRMBLCy1Weoi0OxUnW kie/Bg8x9uPnvmLhTiadKpAqhvliwo3SWCP+Eb9buJc8owFAha27PisGkTv6LOSm /s8ab9hht9tmQCWMCtxPyt0BFzMpWP+PqQSbrY9G6+x3fAgUU4UN0XpojSOoRP8O 4OZVJdufVJ8DUiXZt5UPgJuJqqr1OYq1+a7JKI390qLY5JJmW5+uk8li5ZsFswcG a4YyajZCU8aO267VQutGJ8ZRGbKyyUk1pjXkcir4oPWs2W8J+na6dRyn3MHfpbiz F7dC15++OZydY1R11iCqKqTOCNIUXkJLTtHGxvoVvv1zsMog4Fc+zU+ZN/c1HvdS KAbTscnND+Ycz4OHeesRKt8KT9hbSMLRnqKSncs5eIYQdJKIpUBw1jfndTRn9cln H0f40iZjHiE0Fvqa/K/UtE64f3OJ3jBMUiuCJ0n5Aj2NNszFduaN1n2jOWNu5jZt h0PzEvS5G1akAdPd3NMQdnKzUFAkYUM6V0zABvvyQZGJLcpoByvTamMySbLo2UGX NIBKHd2LwkmzFfTgRmJNa51xkf8h1ZQT+TLGRJ8S5y6YQf0vzN5d1P/WIFmljTuV QxuzMr0xmqsownAB1qxU9Dv7Um9tgYyejTIGrd6LqHtdTrGaiSI= =TvCp -----END PGP SIGNATURE-----