-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Nov 2026 06:37:55 +0100 Source: popt Architecture: source Version: 1.19+dfsg-3 Distribution: unstable Urgency: medium Maintainer: Håvard F. Aasen <havard.f.aasen@pfft.no> Changed-By: Håvard F. Aasen <havard.f.aasen@pfft.no> Closes: 1146722 Changes: popt (1.19+dfsg-3) unstable; urgency=medium . * Add patches from upstream to fix multiple CVE's, (Closes: #1146722) - CVE-2026-18739: Off-by-one in poptStuffArgs() - CVE-2026-18743: Buffer overflow(s) in poptConfigFileToString() - CVE-2026-18839: Buffer overflows in popt --help printing * Remove RRR, value is now default. * Remove Priority field, value is now default. * Update Standards-Version to 4.7.4. * Bump debhelper to 14. Removes now unnecessary 'depends' fields. * Add reference to local file for GPL2 license. This fixes a lintian issue with 'wrong fsf address'. * Update copyright year on myself. Checksums-Sha1: d6b35709cecb5074549901d6b7ed69c13cacec7e 2079 popt_1.19+dfsg-3.dsc c2dea3009e2c9d4ee262a92e76d16b50e579a0ff 17872 popt_1.19+dfsg-3.debian.tar.xz 7c18d6e62a9e5909bdabd63a1a1704c8b8619afa 6475 popt_1.19+dfsg-3_amd64.buildinfo Checksums-Sha256: c04301c01bf615b729015cfe68d4dc68981281be55c7b154a71ca7ad462d9d1d 2079 popt_1.19+dfsg-3.dsc 5f90caf64961561273bbeb2ef18e7f4cf042b9cf3a0349c9d9980c1601176f7c 17872 popt_1.19+dfsg-3.debian.tar.xz d6c7dbb014eed78977a577c35176a68eba0889e1e3398110a93e39afd301f142 6475 popt_1.19+dfsg-3_amd64.buildinfo Files: 1013c267b1553ac44272a84fa1db9a26 2079 devel optional popt_1.19+dfsg-3.dsc 51b50302cbd1e1473b224bacee4a2884 17872 devel optional popt_1.19+dfsg-3.debian.tar.xz 19a80a124b84da79a354dce8c2081dd7 6475 devel optional popt_1.19+dfsg-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEESl/RzRFQh8wD3DXB1ZeJcgbF8H8FAmrv24gACgkQ1ZeJcgbF 8H9y8xAAqrn3yx4+JcztujN6xSdgOT2FvYzD4QdSFCXeQY/sM7AOO+htaM9o+T3K D9zO4973m3dtU9LEl83Bmxtmd3Q029oNzo5vJPsvIPa92ImEcIEVUEe4znJoG7tt D62iiKJyV2dc/DRcr02YpoQt8ny5t5HPZXKlM0BaQiknjxtTwERdveSzAp07UZgo qveFQl7Nw29AZJ5cOh995O24pnfNspOwep4j2ZS1sEcsyH5Se0ZTtrzkC6efsrM8 dEs5sDKz+03T4S2sh19R8NdDCRgqwiI2QFwo+BxpR7aD6h5SKdZba18jHr5Zs2Vu zrGLYJ7n3+HCkcI45qS/gqgurLaovDr4O2W/QpIHqW5BnC2Gw6uKwVkYcrVTcHiw FMaJnCu4pbZ7yt2QPwyv1PggpiFEm+KW6tZPvoB280QY7op5rL/C0MnP3w/SbV+G C1AmYLF+Zhuq0s5W1Q+8XXDbb7RpDhUoHeljGxu9y9SNPl7cJIfd5Yo6rHNTi9Gj VSpWST1GcGlapjpEbYAhNvlTzIRoecudyEWukO2IlmZvytiIB0WIn5/CEN8brux3 L/BzzduGXguM+aVM5ccag6m168FC924II8kntKtUI6I8Ra5NYyWCJADEUyVW2s93 7MIEBN/Wkc/QfLySm1pFMkD47VWkx9EHqu9QfNkYz4I8+OFLcG8= =tjAZ -----END PGP SIGNATURE-----
