-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 15 May 2024 11:32:38 +0200
Source: fastdds
Architecture: source
Version: 2.14.1+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Robotics Team <team+robotics@tracker.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Changes:
fastdds (2.14.1+ds-1) unstable; urgency=medium
.
* New upstream version 2.14.1+ds
- Fix CVE-2024-30258: Denial of service against publishers
- Fix CVE-2024-30259: Heap buffer overflow in subscribers
- Fix CVE-2024-30916: Denial of service with max_samples QoS
- Fix CVE-2024-30917: Denial of service with history_depth QoS
* Refresh patches (no functional changes)
Checksums-Sha1:
650e30cb13c5537596669cb231a6bd96afb507ae 3254 fastdds_2.14.1+ds-1.dsc
e10a08faafd72dcf383c45a70cff725ac1bcb70a 3229676 fastdds_2.14.1+ds.orig.tar.xz
fd04145cf250929b6e2795f2ed3554da7e1c6509 17640 fastdds_2.14.1+ds-1.debian.tar.xz
457cd3a713896c0ca4298c80237f999dd8b7ce2b 11527 fastdds_2.14.1+ds-1_amd64.buildinfo
Checksums-Sha256:
bfb4308482dec48bf785924e737191d732136289f2ec97d85cf01f1eda7adb53 3254 fastdds_2.14.1+ds-1.dsc
d9a317bc68d1ffb9ddec1a647d094f4e929c69fef3344ebc06e75de661b4c9e0 3229676 fastdds_2.14.1+ds.orig.tar.xz
7b7d01f6da73926d8c0597f9b9f7346302a9b6f6cb84673973b5164ed97f1063 17640 fastdds_2.14.1+ds-1.debian.tar.xz
9b6d994e3de2087f3d135685a1e38b9503af9da1eb2773768d7a743e9309b1e2 11527 fastdds_2.14.1+ds-1_amd64.buildinfo
Files:
c0fec9802fd3137747209394eafc810d 3254 libs optional fastdds_2.14.1+ds-1.dsc
bb3faa822d8d07dfdb72ce2bb2122394 3229676 libs optional fastdds_2.14.1+ds.orig.tar.xz
66d0e260b92ac2a7ac2d6984aee17b03 17640 libs optional fastdds_2.14.1+ds-1.debian.tar.xz
6c0a633f3e0b4de4a96b43a4ccdfd2cd 11527 libs optional fastdds_2.14.1+ds-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCgAyFiEEmwPruYMA35fCsSO/zIxr3RQD9MoFAmZEiJsUHHJvZWhsaW5n
QGRlYmlhbi5vcmcACgkQzIxr3RQD9MqKvhAAgyR9GZO9CVNf0LCA9+Y6CTxnNvjV
IZEchNS5p86RzTyUXxg4SG4YFI+mzapYePBpIPFdf+38tDC9DHhfyIpFMW2Y76bC
W4FeczmLCJKL7IQ8n5rzEA2QeuQHLpwZwK7SESWOFHh/6SgepD3N1wzgRI4Z+kE/
t90EMwnJm9x7KAac9eEHaWHT/RG78OCH5r1+0XGw9LyAFPLUcSHe9hBhmPTLDIr8
MvJiHm8zW0USz/OQfoA0ooFpArNaqCtEsM3mKd2+aGPnekLxx9VkikuH3snlY8eH
5VkyP1b0SDiqIoLGevWwcREtZhCi+BC7pEIyh5JUclOfUX5ZVLkfO5jS5FLfGriS
gcTOZPcI3EjGFM27gUahSzf9ztWHnhIU3uqvh6qEuSO1sDYuTMCg7TsiZ7IpjOs2
fiB7nuxdHUy0x0f9fK7Bnmpj2kbbRhyqW7u2Z/WkoP5NegC3LNsaV//5v+Zj2iKR
RCvpuxyQ1xJeGDFPt18yWM3GXj/aKcXxr/hkjwLYbQ0jWsniS2Kh10rbdn9pleFK
11NNkfqhDckxqqBqmctZFe8fHMa2gSuSkrZHM3dFBx5B2NPlXVnOuOzq3h6AD5/K
j+AgawVQwnWY8zyDkAMaXUL1kOvnc4ls+g8a0ZqiWzGKJSVuIuqVp7aCEZth60x6
TBJKrco3iU0nYEU=
=v3lv
-----END PGP SIGNATURE-----
