-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 Nov 2024 22:03:43 +0200 Source: sqlite3 Architecture: source Version: 3.40.1-2+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Changes: sqlite3 (3.40.1-2+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2023-7104: Session extension buffer overread * Backport fix for a stack overflow that could be caused by a recursively defined WINDOW() with a strategically embedded error. * Backport fix for a technically undefined signed integer overflow in fts5. Checksums-Sha1: d6585efc9f21ff7f33d95f7f69d6f0bd3fdaa144 2519 sqlite3_3.40.1-2+deb12u1.dsc 6bbac3be3545e2440a9ea2d9b70797e61dc3b398 5865720 sqlite3_3.40.1.orig-www.tar.xz 92fa12f357ce9bc383c9612518c46f9b546ed43a 8019048 sqlite3_3.40.1.orig.tar.xz 31744845221f52ddbd9a3a5ef86233c550eb5b6e 32140 sqlite3_3.40.1-2+deb12u1.debian.tar.xz Checksums-Sha256: fdb3bd51669b2db14eda13610da0024002386d956a3f6ebcb616aab502765924 2519 sqlite3_3.40.1-2+deb12u1.dsc a5e95a18d1b59729278860559ded78751b9163ffb5bb906c5cd24c015f71d5fd 5865720 sqlite3_3.40.1.orig-www.tar.xz aaa776260ab4dc976db34aa7891819484c8676b5b2783123ebc6301e2ca5d655 8019048 sqlite3_3.40.1.orig.tar.xz f1244509c617b6c19170e93fc72331716231e0e4aad1112c34c07ff783370b13 32140 sqlite3_3.40.1-2+deb12u1.debian.tar.xz Files: 650a865d223a2345ecf95fe7c29491cc 2519 devel optional sqlite3_3.40.1-2+deb12u1.dsc 5afcd1d489a892e6e57dae937af918ea 5865720 devel optional sqlite3_3.40.1.orig-www.tar.xz 79f2507907721b770cbec98195cecece 8019048 devel optional sqlite3_3.40.1.orig.tar.xz ab6955af6d0cc9943e8e7e7c0eb7f3f1 32140 devel optional sqlite3_3.40.1-2+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmcmkQ8ACgkQiNJCh6LY mLGmcg/+PNNemUk3WEKU0p1/vaKDE+oSbNQ5yK53UN5ZDFaR8NOD6ewg2Q+4aIRw uQNNQMJ1P/pShKvzaMuavBhBzTvboh9s/cxtyMcFPwptor+Sxt/MlSl4uJqMfcoP peIAeELlQ4kr46XqtLjBa7MvOtvFBxwon4VzSREcL8zxFLwRDduEtOWfRs6AQcSR FCiYnP1kIa4Z24d5mqaEEfwvgSWHJorebikW/JiFPt3yrQCZJbpS+kRhzo/Sd/7p s0rEFFUpOH24nAOZ6ehJ0fEO8TEbvaBDeRFGuKV28WeKIp/5OaSSiD5WMiH4lJmt 9bFgkvPEn/wUkXCCnua+c0gVhfQoPuwH7nOf9RXmvdnvjcojJtkSvFFNkIqdI7mG 537S6UmI2vLFZLt5QWZFTSe/CLBaJR9dNNrs6E6p/cDk6g1jg5Gian9w2HcBU43O EJHbgP45ZgmpsFfdwlm8kmooqxadaeAbhQKoA7R4Ax4ciFmZCbu8nLRCc1l8nPfe qziD2yWkgdt68HHAbCCnW7c3UGopYqQkFAysWT137qK6RCXv91PGScf+2H2L6KJB S4wAFtWsngUVe1MOMlP/UZq4zgEGvlghFcxu6bltvHigeLghH9KZuuv8NLEJu66X nXZWB+nf0UV75pn19gOpeRYk2zkUgcXqyFB2mIdRjiOvXa7xRKs= =vyBV -----END PGP SIGNATURE-----