-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Feb 2025 12:21:36 +0100 Source: musl Architecture: source Version: 1.2.5-2 Distribution: unstable Urgency: medium Maintainer: Reiner Herrmann <reiner@reiner-h.de> Changed-By: Reiner Herrmann <reiner@reiner-h.de> Closes: 1098238 Changes: musl (1.2.5-2) unstable; urgency=medium . * Import upstream fix for out-of-bounds write vulnerability. (CVE-2025-26519) (Closes: #1098238) * Bump Standards-Version to 4.7.1. Checksums-Sha1: 8acba0fbf4b05e78eb935e74dc229de3146d4619 3643 musl_1.2.5-2.dsc 36210d3423172a40ddcf83c762207c5f760b60a6 1080786 musl_1.2.5.orig.tar.gz fec06dab23edbbc33612205bc80e537f8e937b49 490 musl_1.2.5.orig.tar.gz.asc dd1ca10264812b439a6b28c751397895825df16e 25516 musl_1.2.5-2.debian.tar.xz 9bfa87b2fdb1502c0b63fe362ff82bd700d5df52 6263 musl_1.2.5-2_amd64.buildinfo Checksums-Sha256: eb5d9a95ec06732dc9146c94a8023e6e1033daddbe52234629c73ae954e871c3 3643 musl_1.2.5-2.dsc a9a118bbe84d8764da0ea0d28b3ab3fae8477fc7e4085d90102b8596fc7c75e4 1080786 musl_1.2.5.orig.tar.gz d9030116fd03e4acfa0b665a13a5de46110296b4e30bb8e67be1f08af29f6306 490 musl_1.2.5.orig.tar.gz.asc 73d0143d61a5b548ef20fee347b7ea31cfdfff8404c4b915cf506988ff84469f 25516 musl_1.2.5-2.debian.tar.xz c19688bf4d64b2be7e6a93d1e14b410f2435020ca51549447d9901251e839950 6263 musl_1.2.5-2_amd64.buildinfo Files: 5e97dc331a5a3d1b7c8b3bd6791fc6e5 3643 libs optional musl_1.2.5-2.dsc ac5cfde7718d0547e224247ccfe59f18 1080786 libs optional musl_1.2.5.orig.tar.gz 52945accececaefa1fb269f95eb152b2 490 libs optional musl_1.2.5.orig.tar.gz.asc 6c0c84e7825fd3f41bafde497046dd71 25516 libs optional musl_1.2.5-2.debian.tar.xz a457c9c298d2a22ae4b85b952629b9c4 6263 libs optional musl_1.2.5-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAme8RuEACgkQHpU+J9Qx HlgkZw/5AXsEQ9xgGshH8OdwkwZcK2jkTB5I+JdscTauZJTTCcinzXfRYT6hp9Ks izOF/ULD976+q3tAvZLLmH9gANqbW0N2ghSRQMEiSjWJ0/Gl0sVf9Kei2I0PSXUd SqhV76wCQ9cC2xYyMUezT1x7/awROiaJgH9a2hskS8tLOPxNDOUq/DAFMiBY93Py Pem3xCx0/34Hizzft4qY9SEG0BWIu2lbp/jnjg0Ks4bk3bFxNLuvUnQ5HdMQpopL GnvIc3dBGwIEw7DbblRz3nlLvh0aEWwR0sB8KoOR9W/4kGwgwLGv7/FCTAnRHftg pyscBIfXP/bVA1XUbKEHvd8QfYfCgj2bS9f9DHH8CTLscdqwVyKZ25u6zZ9O3pqR QFrnRVaCn04TZSTW6D5zqnPPrlKLus2IafQU1rQG7euA4cxhALAqyqWiaouyACR8 TGdwAbe16a0xbTj/4hLFjjM4nK88KuT2spOpNCsTl04FmY5BVupBMjJsZVVKJWkG Tk8y2TcvCWGyH/5dDhfvJ+O9zudeQ07r5efMe1CjKLnaIAX63/uy4TkNirWgG97z /ANdAfgJoOkrXfKnlWbHP2MnLmPheS4ZX1AbFVvokoGCMspHs7/FK5ts3wcGrRxS dd5jJHrNuhJRqMEOdQkAnTf+C+Et5USNTjPgrGyc+8fTmhqzbkg= =M9az -----END PGP SIGNATURE-----