-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Jan 2026 10:03:02 +0100 Source: zvbi Architecture: source Version: 0.2.35-18+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian QA Group <packages@qa.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: zvbi (0.2.35-18+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2025-2173 fix uninitialized pointer in src/conv.c:: vbi_strndup_iconv_ucs2() * CVE-2025-2174, CVE-2025-2175, CVE-2025-2176, CVE-2025-2177 fix integer overflows in several functions Checksums-Sha1: d55489be8b0ac2a2c2d391fad0d903a7fa788eae 2310 zvbi_0.2.35-18+deb11u1.dsc b0fc8d596c90d603e883e6b195318c6b276a3eb4 1047761 zvbi_0.2.35.orig.tar.bz2 e4ec3f56e12f0edfa22f7c75425639cceb4e659d 17344 zvbi_0.2.35-18+deb11u1.debian.tar.xz a79b0d7cc1e531151310d2089577a07e58da509a 8576 zvbi_0.2.35-18+deb11u1_amd64.buildinfo Checksums-Sha256: b9678ee53ca0323ce5583122be929dc38f33eda277e0e1f6225835f4620e6094 2310 zvbi_0.2.35-18+deb11u1.dsc fc883c34111a487c4a783f91b1b2bb5610d8d8e58dcba80c7ab31e67e4765318 1047761 zvbi_0.2.35.orig.tar.bz2 f24cc41661eadc44192ae0d4c68d552278a5dd8dc52997a709c2820455b88d61 17344 zvbi_0.2.35-18+deb11u1.debian.tar.xz 99fa7119315d2ba3082f44ef6b01d474b4c29aed3368c90bd61ddb1e4396c362 8576 zvbi_0.2.35-18+deb11u1_amd64.buildinfo Files: cfa642e95fc4fb28148bdd71eedc7687 2310 devel optional zvbi_0.2.35-18+deb11u1.dsc 95e53eb208c65ba6667fd4341455fa27 1047761 devel optional zvbi_0.2.35.orig.tar.bz2 fadc547ded1c61d76e2905fa683d9cff 17344 devel optional zvbi_0.2.35-18+deb11u1.debian.tar.xz fe26946c44975915319b9c953435cd08 8576 devel optional zvbi_0.2.35-18+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAml0vDRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR4d1D/wPu1EtHZGar2T6Pr78Vdv8goXSIjUz hZHDRGxUck7Rm5MgvEk0PFIiNm2NHFxbHjgXJ0nCTO9S4Pr0GXYIX1q5ic/4rbLo AAob3Utpfo0Mxrzmz0L0wN2uwS0J64miUz+8JPvDsQMfsm26XEJvXZJTlrxdz1Cq hh0yvRzBbREja7OW1k/uhTTfsj7Ko/VjnOLs0GPdiX0cpWkbm+x+qc6BmB3qSDYT zRTuz8qCGk4/KQ32Gm3Sut+wiip7uR/py7xllXfNPDlNGFtP9QiTZjgvDY31lydW 5kk/adDy12c5Z/s7LVbxIOknBvU8igzqM8ACZnNDh+IkypypzI91DkBNfCNH6kiD K1ikVtkygTWT73zRfyThC3hoItvR5QdLLQHcYA1ewpCRqmHNEomgl68eypR9JS9K qXBm1beJ5e0uHOSLq/vi+/1FGLSmgU0mIabqRPAUVdm5eHh0txbvulicJdQuDFuv ZREtGwtUXvooEiotbfz0fv5DnfEQ8IPcSxKBWxfAvG1P7ilZmkD7kMoTQF+JnewU w9NGgW58tR1AgpImFqKkjqXDKzLlgnxesGbG7HuBnW1vSDiVBRCtlkrw+vBAJYTy ewAALS8jZsV5kVPyKGghTL1Ca0ZrEG8IuTr56YIFu2Fge1ZRPRpSnLVflhMUwalB e3BRX1D/89uC0g== =ZkYR -----END PGP SIGNATURE-----
