-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 18 May 2024 20:03:31 +0000 Source: fossil Architecture: source Version: 1:2.8-1+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Barak A. Pearlmutter <bap@debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1070069 Changes: fossil (1:2.8-1+deb10u1) buster-security; urgency=medium . * Non maintainer fix by LTS team. * Cherry-pick fix f4ffefe708793b03 for CVE-2024-24795 and add "Breaks: apache2 (<< 2.4.59-1~)" to stage fix; see https://bz.apache.org/bugzilla/show_bug.cgi?id=68905 (closes: #1070069) Checksums-Sha1: 63d782724ab0e6202cc699d912d8208344d785ff 1876 fossil_2.8-1+deb10u1.dsc 5b44481a47d49e1b552ca0cf74954f2d958686af 3697636 fossil_2.8.orig.tar.xz ed35d88057721b4b7cccca722408057e8b287927 16728 fossil_2.8-1+deb10u1.debian.tar.xz 14a2ea392aa1e46eba732e41f2630b2d3d1bbf65 6657 fossil_2.8-1+deb10u1_amd64.buildinfo Checksums-Sha256: 324409627134d37db38b138a046a0367b296c796723ec510880ee9010899ccc1 1876 fossil_2.8-1+deb10u1.dsc fdc27fa021971f495452783db404d47227697563bbaadd555ddb84bcfe6f3566 3697636 fossil_2.8.orig.tar.xz d043d72efe687d9f1ca2fcb56dbfe4654ea2d1f45eeb027314710d69b35589a7 16728 fossil_2.8-1+deb10u1.debian.tar.xz 4e48d7408e65bf9538a648c0c76ec8313c3830929bd96d30d301c58013bddacf 6657 fossil_2.8-1+deb10u1_amd64.buildinfo Files: 8b066bd8feac32586d8e1296296aa256 1876 vcs optional fossil_2.8-1+deb10u1.dsc da7b64e2acc1f5e47abadc9b08d3afca 3697636 vcs optional fossil_2.8.orig.tar.xz 6df98736f1ef2aa79aff08bf220b67ec 16728 vcs optional fossil_2.8-1+deb10u1.debian.tar.xz 8d0b24db554fcb88c0e4a6fae5a750c3 6657 vcs optional fossil_2.8-1+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmZREtIRHHJvdWNhQGRl Ymlhbi5vcmcACgkQADoaLapBCF9Lqw//ZVVh20S4TwLaYTSTKM/2aogFSdD/nkJK 0QLAfWATKyCp8swqRxw+UhdVzVtspJSvHtNO6OQ1HVSQUyRZdfLPFWyEztaCi4g0 OAcCgZw6/3mmbGUyycLyiBfAXifuNq98/2oHFawnf6wAm5Cd9Lng/67e5smGRHfA mwnn6s4qUsX55BJJHWATbis5o57NMzTgu4vjZH1gdpMa9PaSFb3OrpAJ70HU8eSr znB8uPEvfyIiNbylz2hzhRB5yoSSHfa8zWg/1QCz00/wDD3L9ZXXp3Ed4LSFZPeM /4YyteJmBJ4Yzfp2XbQ8myzOLb88x3A3GImcWuhLgCU+l8/RSOTAMB0nM8ArcYrx /UBzKddNcQ9Vi0yN1AyF5YzNtRQ7hDN7Mv3S1piGLmVeNzs1e0zZr09tGJu71I+Y KFgw2Iqw+N334C4Bo+AYF2ndNk2zZY/7DcNNvVgqnL6e/HNaA6tAfEYkVHkdrTx5 +4Bzg7nXZFtFq7QblY0OUBR7aIT+XR89luvm1vR3eWxvr1pjM/6aRbX5hs5L6yj8 cwTvjPI6HaIjlp1GEp90OO9TGO6wsDt4rd4Ec3yDrCJJ9V/RaX6MICkapOMfuYlu caHpDFOYNFR/E2Wurfm4hTSYmVVKBcKRmT18TfWXu7FDID0V0iFC2x73CSzh/rlS pcF4hbqZp74= =8gEc -----END PGP SIGNATURE-----