-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 28 Dec 2024 12:53:25 -0500 Source: harfbuzz Built-For-Profiles: noudeb Architecture: source Version: 10.1.0-2 Distribution: unstable Urgency: high Maintainer: أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@users.sourceforge.net> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Closes: 1091529 Changes: harfbuzz (10.1.0-2) unstable; urgency=high . * Team upload * SECURITY UPDATE: Heap-based buffer overflow (Closes: #1091529) - Cherry-pick upstream fix for the hb_cairo_glyphs_from_buffer function - CVE-2024-56732 * debian/upstream/metadata: Add security contact Checksums-Sha1: 10cb958c841f8fc02be3206bbec9dd69aa16c2b1 2864 harfbuzz_10.1.0-2.dsc 327a448d282d12ba0a5ece4a18fd0bf3becb589d 20740 harfbuzz_10.1.0-2.debian.tar.xz b8ed73d8c404234a548aab03f5939a738de2401c 11405 harfbuzz_10.1.0-2_source.buildinfo Checksums-Sha256: c79e3ea8bde0627472ea4f76017ca75fa4fe3b89c339dc8f27f5b0813a2a5f8c 2864 harfbuzz_10.1.0-2.dsc 4dbe422fcfc93e755e2f85be8da97024c6590b82cb9948557cb38086694e06d2 20740 harfbuzz_10.1.0-2.debian.tar.xz b5dffbdb770a6c78e4f9b7276a087ca4e2bf578303626b6ff001ec5a13a7242d 11405 harfbuzz_10.1.0-2_source.buildinfo Files: 4558de312de25b689736f8fd02471a56 2864 libs optional harfbuzz_10.1.0-2.dsc f41c8dbab6707424b474856c3d035c61 20740 libs optional harfbuzz_10.1.0-2.debian.tar.xz 5b337049136a7c4c6d580d39828cb849 11405 libs optional harfbuzz_10.1.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmdwP08ACgkQ5mx3Wuv+ bH21yxAAorkOWj2fgqn9G/kf75KIYNO+xxVY23o86IrcMA2c0MKUv8Zo/ST52yY2 CvDIEr58DlTFcXgIaR1+n55u37is96gfIoHWue6w58gnvJj1iK1OSKie7/0Z8xuK z66+medWobSixQSdlm062PDUkLdSBfjejC1uqmxKFDF6swla7YDJ4DV7tA2ekq7j A3lYpvUPJl6NTQ0X56EiybCppwbsc0QltbXhH4YDbn/XHqdzJZhVC7394QaT6VSn l2e29+IL6FCBSGQpSoYQQOrax0jI5T1BJ7yBr7tEOOw8Vqp8R+LXBZbF8jHNKL/J cheuSDGi3b1T7uvh1+fafOrOjR79QEXDYTQjxVxKv4dLdNOFQMqi5gWav7M5vrjs 1GySSz3G91yUgL5rFx6EBRKNlE4obmTsTDJ3ASUDwqYlT6l2lKSEhyhPlIfHbTry kZLpaFZh78VbcdEUrXbJ0rLifBeZcQ9waRe+vRMF/oanH1UWwWnLOfpBqQGd8DwN 86UkyHpHaeWwpBzJfNdL4pICow+TvI1lEu+HcXsjEe5qFnb9WTS5qsCe5fN+u8t7 8ZTBtHLEIHEXvXl1Zi5QA+7Syn2cBezt9Ub9q8oBlkd177ECQ3n8B/cXeUCT/iFY WJMWJC+/5RwsBUaCAdG4jmruupsiyKMsHeO2ySbTKtYig6Z0Cpg= =Yi9U -----END PGP SIGNATURE-----