-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 10 Jul 2023 18:06:21 +0200 Source: yajl Architecture: source Version: 2.1.0-3+deb12u2 Distribution: bookworm Urgency: medium Maintainer: John Stamp <jstamp@users.sourceforge.net> Changed-By: Tobias Frost <tobi@debian.org> Closes: 1039984 1040036 Changes: yajl (2.1.0-3+deb12u2) bookworm; urgency=medium . [Tobias Frost] * Non-maintainer upload. * Cherry pick John's CVE fixes from 2.1.0-4 and 2.1.0-5 . [John Stamp] * Patch CVE-2017-16516 and CVE-2022-24795 (Closes: #1040036) * The patch for CVE-2023-33460 turned out to be incomplete. Fix that. (Closes: #1039984) Checksums-Sha1: 726513c594dce2eaa22fd498acca19607ce50313 1980 yajl_2.1.0-3+deb12u2.dsc 787d03daca1b3e7c8ffe0e0f4effd57798ed0768 6968 yajl_2.1.0-3+deb12u2.debian.tar.xz ff42cd080424d72adfe431a61231da34fc605c0d 8113 yajl_2.1.0-3+deb12u2_amd64.buildinfo Checksums-Sha256: 38420d432584960203b37e108bcf39a5b6f0f2c96620af51e358ad2ce2e8746b 1980 yajl_2.1.0-3+deb12u2.dsc 31ebb5b6e0b76908d9631ce9c94ba1d7a34bbba05ea9ed42ee72422e141cbe48 6968 yajl_2.1.0-3+deb12u2.debian.tar.xz cfc083f2d27a46b0b6c4845d6ae78e566bd8350afba321ffd5a48b9ca930b549 8113 yajl_2.1.0-3+deb12u2_amd64.buildinfo Files: cb6e1a7dbac4040aad65449b5f7aa2dc 1980 libs optional yajl_2.1.0-3+deb12u2.dsc 9ae58d18d4f93a3ba6b0562bde73ccac 6968 libs optional yajl_2.1.0-3+deb12u2.debian.tar.xz cb62c063ad3858fd4397241583df8635 8113 libs optional yajl_2.1.0-3+deb12u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmStlQEACgkQkWT6HRe9 XTb2tBAAm552mSdP707PFcjYUDQ1niTeudTUgsnF1uO2DOrPQGhPWS6xQAj27aGB Y9GLoynysC+3Wr264XIwltlcLUZdh/EEVh+q96dTJEV8tbsPI3Au2bHGjkx2xZdp pk/ZZ9Yqi5/NQRVqZlU6V9IyQRCRhbkNphEjp4y/FbcODM6u4hFe556HLsHb/s/w CncI9lIqriJRo/aWBLhn8cKi6svqnKqJT6zNBxmfr8QFgZD0F6DL4umN+LVsW2Lt 9khzfMC4wHMS14WekKqyP25jMXzFCCNk+oKD/NC3DpkMv4TuSLnwBMyb9Og8ThRU yW55DBcj++gQJ4ZG3YfKApgAAXN5Fo9vQUhkCl1gCPwjS0My2TXMiew7WEaaCceT n2wo0gIbVE84fC6rT/cJBgA5FJuTn9SrV/oawIr+VSb15azm3+fqCCDgJjj6wXb0 OqlmeqOkwYy7bjDPyKf8cOrWqb27nDXBEJv2vrJdheXgkfsjLMkfHTSfQlwPAu2B gfT7U+FlJudgRGFIxJ0Ylvstg0bnfjFBPQQjCd6txn5LKqhdmVLRjlnu/bJXchIv /inknq1yz1rxFP3RAQnXRR++Lbp7W4nI8fR/9yLf3KsJVA3dVk4KUItiaLtJuN+U Zf9eFBazneS3N4zL81bjvNVCpCIB34QfDlrZp4i9S9F/adutrS8= =QmaW -----END PGP SIGNATURE-----