-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 20 Aug 2023 01:04:16 BST Source: librsvg Binary: librsvg2-doc Architecture: all source Version: 2.54.7+dfsg-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Description: librsvg2-doc - SAX-based renderer library for SVG files (documentation) Closes: 1041810 Changes: librsvg (2.54.7+dfsg-1~deb12u1) bookworm-security; urgency=medium . * Team upload * Rebuild for bookworm-security . librsvg (2.54.7+dfsg-1) unstable; urgency=high . * Team upload * New upstream stable release 2.54.6 - Fix a directory traversal vulnerability (Closes: #1041810, CVE-2023-38633) - Drop a redundant test-case that frequently regressed as a result of non-problematic font rendering changes * New upstream stable release 2.54.7 - Fix compilation of 2.54.6 on rustc < 1.58 * d/rules: Skip several known-failing reftests on big-endian architectures. These succeeded when librsvg_2.54.5+dfsg-1 was uploaded in September 2022, but regressed sometime between then and the bookworm release, presumably as a result of changes in some other package. (Mitigates: #1038447) . librsvg (2.54.5+dfsg-3) unstable; urgency=medium . * Team upload * d/p/debian/tests-Skip-known-failing-tests-on-i386.patch: Skip two tests that have started failing on i386 since October 2022 (Mitigates: #1038252) . librsvg (2.54.5+dfsg-2) unstable; urgency=medium . * Restore the librsvg2-tests build and corresponding autopkgtests which were set up a while ago but disabled to avoid having the upload blocked in the Debian NEW queue. Include the svg needed for the tests. Checksums-Sha256: 0a228e6c2410c3735fd1fd139db1b41474f8c08f2a42e7c091b5417e88f464b2 71716 librsvg2-doc_2.54.7+dfsg-1~deb12u1_all.deb d433d4aaa11e1d9ceabfa68d49090876abdc33570c06227e0b30b5d0b7206a49 11402 librsvg_2.54.7+dfsg-1~deb12u1_all.buildinfo 87925d4b6f5f1a8b5fc8e069d69322d4ac70694408490091c05737b97ba938ca 2997 librsvg_2.54.7+dfsg-1~deb12u1.dsc ce0db15bd6a2633fbfcfacce894a81ad5c0056628ad176f00ddaa648d462e5fb 35052 librsvg_2.54.7+dfsg-1~deb12u1.debian.tar.xz 0aa85c97d6b225d3fe1eea80883b26a53a34f341187f21857197bf37d07a1b2d 11192 librsvg_2.54.7+dfsg-1~deb12u1_source.buildinfo 799f93b73ed24c03efda1c707d8c40630fdee18c7e7532dda4ad1ce9671e98c2 14342756 librsvg_2.54.7+dfsg.orig.tar.xz Checksums-Sha1: 9b0dfdce37aaaa4591342dd8a3f2f7429015e8c5 71716 librsvg2-doc_2.54.7+dfsg-1~deb12u1_all.deb 62652d4905e6660b5ec741df470ebcc70e248dec 11402 librsvg_2.54.7+dfsg-1~deb12u1_all.buildinfo bd6390d45292ac04b7432ad45dbc8c92286c0e91 2997 librsvg_2.54.7+dfsg-1~deb12u1.dsc 5c6df80d5c45fad79957be4e23177195bf16e467 35052 librsvg_2.54.7+dfsg-1~deb12u1.debian.tar.xz d542d85893b011114d18e8105c3055983ebf3999 11192 librsvg_2.54.7+dfsg-1~deb12u1_source.buildinfo a9b696f80b361e4a6318edcd7e1a652676302171 14342756 librsvg_2.54.7+dfsg.orig.tar.xz Files: 803becbead40b4087e969cfded6bbd46 71716 doc optional librsvg2-doc_2.54.7+dfsg-1~deb12u1_all.deb 1d3409621824786d4fdc4b7d7c8e7225 11402 libs optional librsvg_2.54.7+dfsg-1~deb12u1_all.buildinfo 19b13227bcebdcb647616803758ddcbf 2997 libs optional librsvg_2.54.7+dfsg-1~deb12u1.dsc 4b77f3682cf3d543b4fdecd2bd7e65ea 35052 libs optional librsvg_2.54.7+dfsg-1~deb12u1.debian.tar.xz 78d130da555b5ec9101bf7315df391d6 11192 libs optional librsvg_2.54.7+dfsg-1~deb12u1_source.buildinfo 4b6ba4f19da0a7859eaad6461246aa91 14342756 libs optional librsvg_2.54.7+dfsg.orig.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmThWIkACgkQ4FrhR4+B TE8qPRAAhya9W8kEgHutYyfZm7IjoATueH8RxsQbckzaPcrSFY1rv6ojKSXVPeXH i8o7uqZBW5vC0TpJ+CQVkC8KkLHVXmqa8UV0tONcHQOfz/E0usJsHgUx8yNE8HDC kP1EqeMUNmHQZFRguiARQfpSlE6EY9gtQihPJDQfb9xZqEcLEP280GYaSxNMh6Pz uLbl6W7QJVKetUNWtB2udRs+9YY5y9goop4etkUa1R9HR+a3YtAi1+3x4VIWc8Zj jWb+2eQjQEFXjwCZBJLrCxpLr+jzpm/3xHBtFPu+cU6qSe7A87zMRkV9wAnzyHrV EXb4DjuOLAsdn23KsW4JvlGQkRgeMONNUtEYcLyYX43hpQIprraU96MkE2zUyeD+ qVIYjOb8pvSDTho58n4CINjaPIOvH9pY5TlUX5SnFGPSUp8iqD7HhSeOo/q4Yy1b MI6+YInU2p3kaT3Lv1pyUogO7bC2pUQVv3hGKLyCT1qse+i0dVnSOEULm6m3RAjP Tif7QuCdWtpQzXrX0Mo/7FXCLVGFjSMhcqQTBcQBD+HJSK5wRFBsMPhWDfWjCxNK GUsmDJED07VPjUvqBTL35LplXZ/8pq4dpOGgYU+RgSl1UVv0sq9ZpgYYkCAuY7Lv /J3oC1V0eHinHt7cwT/La8uxUeCrDHYpjStQeFVriF+K80v30DE= =lXf/ -----END PGP SIGNATURE-----