-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Oct 2026 19:29:47 +0100 Source: aspell Architecture: source Version: 0.60.8.2-4 Distribution: unstable Urgency: medium Maintainer: Agustin Martin Domingo <agmartin@debian.org> Changed-By: Agustin Martin Domingo <agmartin@debian.org> Closes: 1150460 1150801 Changes: aspell (0.60.8.2-4) unstable; urgency=medium . * debian/patches: Cherry pick upstream commits to fix vulnerabilities (Closes: #1150460, #1150801). - CVE-2026-103658: 0001_common-string.hpp-fix-integer-overflow-in-String-res.patch. - CVE-2026-75818: 0002-prezip-correctly-detect-bad-input.patch. - CVE-2026-75820: 0003-Limit-length-of-words-added-to-the-personal-dictiona.patch. - CVE-2026-75819: 0004-speller-readonly_ws.cpp-check-that-offsets-are-valid.patch. Checksums-Sha1: aa10418ddb69d4962c36a154af5d6ebb968ac3dc 2438 aspell_0.60.8.2-4.dsc 7d75ae11f5721849325f7647ba445b8fa0e38eda 28544 aspell_0.60.8.2-4.debian.tar.xz 1805f753e27f4bd55d7ac73f5262bfbf06e1072b 8208 aspell_0.60.8.2-4_amd64.buildinfo Checksums-Sha256: 0a25505d750c272e6db401d00c72c99bd078b141f18894d50925a9390223575f 2438 aspell_0.60.8.2-4.dsc 6fe919d3e5ff8f1c59c4e91c0e28b982ded8189adf1f19349c0d23cb8f82a8ee 28544 aspell_0.60.8.2-4.debian.tar.xz 1ddc41ce4ba7b06b54ae1e83b9fbfa9c1f8725a344b2e20e6f72810e62980202 8208 aspell_0.60.8.2-4_amd64.buildinfo Files: 9d6194f4253021207a86755e34a4a6fc 2438 text optional aspell_0.60.8.2-4.dsc 0ab82b4afc69e855ca1fdadc45b5c506 28544 text optional aspell_0.60.8.2-4.debian.tar.xz dfd51a96a4aa9e620e8956663f2977be 8208 text optional aspell_0.60.8.2-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEEehey7p+gYd346SEFJrCLeiggvwFAmriRXsACgkQFJrCLeig gvytQw/+PE20140RbHo3PNq2D90bzlCbVk58avcoPNw1EafNAk6VkaobDwdeDF+2 pvdNz9Fwo7v88fpL9RVRakJmKQlcMusvuRKXsdTVxUWAtP2s/I7d4xqN93FvqkSb LbOyfu8s9OdiTGFIJtTQuZasY9vJ7aGLAu60YMbNNqKfOKbgZwrs56aZFnNMj+97 VY4TEKu4h4ha/hj/Yr12DPuuFAHZfonJ/YlaeaqAwYD7mCxlHLYLYe8dVAumnkNZ fmVtaGMwBOBMc/1BZGP2BFwbhS2jxe3czbcN1BeDBoDcVjZOEKR0CPaiIVpL35qf c3NFI6BC0TqFMiNlJj/S3UrbJ7kbnfLsXiGn9i+MttWv26W8aOCuwo6/25OZVeaN Kx03K7z3CeYvhQ1CrjJ4hfKDd1WZUvAz4S8Wpg3n8DNQilSet59W7OUj9pQMZdA9 mHADmh+s/G1oGEdwsjX2dfJJfAc5/fDnHHo8TWux89LH9g4dTdDicKMoCdr6vEab bMsSdrslvbmr8v8lrNeFgcu9smyVCBMkVCEPG29nzS0Jj7xHsMf0/pYNZWBaI+Uk suavjcRrQixSeGyHFw1K3SmY0j/Kvs+OZNy3ZOA5wHWO5EgNx/Y5TP+GadtA8Zmx zxymZOK0F1u+7sBa5KXAjU7AVKvj9Oc26O2q1aW+4I2LzT//RUo= =UbBB -----END PGP SIGNATURE-----
