-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 23 Apr 2017 13:17:31 +0200 Source: libcroco Binary: libcroco3-dev libcroco3 libcroco-tools Architecture: source Version: 0.6.11-3 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: libcroco-tools - Cascading Style Sheet (CSS) parsing and manipulation toolkit - ut libcroco3 - Cascading Style Sheet (CSS) parsing and manipulation toolkit libcroco3-dev - Cascading Style Sheet (CSS) parsing and manipulation toolkit Closes: 860961 Changes: libcroco (0.6.11-3) unstable; urgency=medium . * CVE-2017-7960-heap-buffer-overflow.patch: - CVE-2017-7960: check end of input before reading from buffer. * CVE-2017-7961-double-to-long-check.patch: - CVE-2017-7961: check color value before converting to long. * The above closes: #860961. Checksums-Sha1: 0601a9da19325977e97086366423b82fec47c532 2264 libcroco_0.6.11-3.dsc 35203ccb3c30ae1d0956a362c6aabe6109e582f3 477312 libcroco_0.6.11.orig.tar.xz a0b943c9a614de87c5e4f20e36895211b9d4c1d6 7960 libcroco_0.6.11-3.debian.tar.xz a7cde9bcbf8cf42e7c681841209e2238bb2a9627 6831 libcroco_0.6.11-3_source.buildinfo Checksums-Sha256: 6f9a86ee343586a7e0405cbfce42e8dacfb81826aaa68372545809338f71da35 2264 libcroco_0.6.11-3.dsc 132b528a948586b0dfa05d7e9e059901bca5a3be675b6071a90a90b81ae5a056 477312 libcroco_0.6.11.orig.tar.xz dadcd41e83ccc4e22f1a6756c35009d4a75553745588d62129461522bd850b02 7960 libcroco_0.6.11-3.debian.tar.xz 1cc2f214b1105e2340548cf0a6aac542212bfb1082db7b13447fb2216494b6b4 6831 libcroco_0.6.11-3_source.buildinfo Files: b5d178b4715754ef7235c5a72e594728 2264 libs optional libcroco_0.6.11-3.dsc dabc1911dfbfa85f8e6859ca47863168 477312 libs optional libcroco_0.6.11.orig.tar.xz 35ed2f988ddbbfb2ac5bc8391f60da4b 7960 libs optional libcroco_0.6.11-3.debian.tar.xz 78df713c6e845a4e7a529b6d18bfcefc 6831 libs optional libcroco_0.6.11-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlj8ja4ACgkQnUbEiOQ2 gwLR2Q/+L4oiaMH6RdrfDP3tlQMKmT0rhPnhCaVPX8PyLNiaYYp3xaCzbD4QwEXF sBbqZwwQYuaKUXtRGhhZgz8zShRFb1JDXE8GJeNF/SEmGcdN2wrK/ZhJGf8q56PW xVhXPURG+50l0/ITmNdcMv+QHCIrCI29ROZ9Rqcq5Gpo5WcPqVPZ7br0/jdc8/It YlsF0a77U1Xv35Ka1t9/DsYacbvVXGieQzt3r3AKOo6f0ryicNkhhqw8boVViQBN 2M6+ca2dm5IXlvGT6NbtlSxALap4KG7xHEE2bV2vCllXCI/LVtgtyVt1BDSv+DiZ LC5+4IeuIhMn7qugS5L3y1OVpyAFOHt7elMFo/is3p9o/YtNAVKqU4qzIRjfmqZm iKnhd3GMobFQl/yev5ToBa7vRoD2QelGXr0h5iLiN/b2jlpe0x/ErGvA/3uwjhYY i5Sal9uXDBmi82vEeWHLf6mG47IxKbaISBH7Ix/uJmPpYlZwFnzQUKRbStGljE4w Zu/PD7iQUhnA5TEeK0MvClP5Jg/mRfvt6rvuE+eqtD/qri6BBlWSmKZLdC7ALl4J 6vxM5a/1t5p/imYPseXtSi7SYhlwC2vJ6hEpir983VZ3Cji4nYOZWcdjGKQ431/K LIcIS+2phSOKpdL/kzg2o58Ln3GGU4bJYELHTzH4UsmIQG2rS9s= =1j9U -----END PGP SIGNATURE-----