-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Mar 2025 13:52:27 +0100 Source: libmodbus Architecture: source Version: 3.1.6-2+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: SZ Lin (林上智) <szlin@debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Closes: 1074422 Changes: libmodbus (3.1.6-2+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * CVE-2022-0367: Cherry-pick upstream fix - Adds patch cherry-picked from upstream fixing CVE-2022-0367 a.k.a. CVE-2024-36843, CVE-2024-36844, CVE-2024-36845 (Closes: #1074422) * CVE-2024-10918: Cherry-pick upstream fixes - Cherry-pick/backport 3 upstream commits fixing CVE-2024-10918 * Update debian/changelog Checksums-Sha1: b860dfbf17a7fef245bcbd1569a5cd5f83234746 2039 libmodbus_3.1.6-2+deb11u1.dsc 5eee65129c4108aad28dbba57eede1465b9f5738 96348 libmodbus_3.1.6.orig.tar.gz 4c11657364734d6c3fb836750821c14b891b3f10 12184 libmodbus_3.1.6-2+deb11u1.debian.tar.xz 547f8e9866e8d9515a974d4b38a42cdcbadd7433 7309 libmodbus_3.1.6-2+deb11u1_source.buildinfo Checksums-Sha256: 9038056847df9b30ef647462647123edc554ada6cf6a45d3043c40f969fc0864 2039 libmodbus_3.1.6-2+deb11u1.dsc fe0c141cd10d58bb848643f00f2d4b4005214f93312d7b66ac805fd369876651 96348 libmodbus_3.1.6.orig.tar.gz 75dca46ca0bf48e021cdc86d42de4a19da30c57ab85e68cf9b5585efc11524f5 12184 libmodbus_3.1.6-2+deb11u1.debian.tar.xz 5c73111dab113d05b0b9cf221e0f8d39d99719da4bfeb81c5d827ea1a81d99ca 7309 libmodbus_3.1.6-2+deb11u1_source.buildinfo Files: a8063eda53a77fe7804df2614f7252cf 2039 libs optional libmodbus_3.1.6-2+deb11u1.dsc 3f94126f7eda99e30d58cdcbf1671dfb 96348 libs optional libmodbus_3.1.6.orig.tar.gz 50bda3cf5cd0f5135033ebc5668ce1c2 12184 libs optional libmodbus_3.1.6-2+deb11u1.debian.tar.xz fe17c0c6ed7961068b00ce2ffc13de7f 7309 libs optional libmodbus_3.1.6-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmfQN9sACgkQC8R9xk0T UwbwBw/9EfdwK5qkRdvQm5pSfz2+g2vfL3OAZS1u5yjUR9bmLBsYk/pW1Uo8GfOy L4YCUAEN4XGJUCLlQP1J0D1fDSlWnDLX/qE2Yo6Hw9JVst3S+C528f8clAZ/zrJC UcaRzFhEciwkhmQfGVUegqlN479bWEgm44JWuElVS05bvs8d4Q+/HAC4zVOecbl1 HQVRBQg4DyYe8GT/IVxmBcnWZ4jeltqYYkbCaw7p071/qZEr/Cn9ZvKBfp4FNm3y dvbQAStLfQzlVSG8IOUa8d1MiI1LwOEsKu5XDuY/WbEaE6AK+jfoO0Hbl1liYaus 5Ltpbxrf1Uml+9NMQ5y15x7zmg6MixuTNWRe3xbaAAJERFGup51FzJl5cSz3BH9W DYntmoBKiQgK5QVuVogncJUsH6r2Fusgm0HvdqXXVwH/WaX1W9zP7XfD8qKeI+71 QcBW6FudrOn/WlYPk/+fY5WFMIR5WRqdOW+R6mE4NQBjI7wih/1YT7oWDYkNsc2l u7HWB4doyeTN4bNfcTiFoxA3nbUKdwNE78rLI4LCBzQ2LSJGraUfVyKM+TtXtEXd /z61PbBFquSCmXKxMgKOBw6h2V9oM+KR8oDzLIpunmy+OQ+9nc8o5AzPWS9mcb9l XaQHma4CNgEGEgMqSMcQURv0ZAHoWZCdVoQBawtw8yWi9DNQEzc= =3M6s -----END PGP SIGNATURE-----