-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 07 Sep 2017 19:05:43 +0200 Source: ncurses Binary: libtinfo5 libtinfo5-udeb libncurses5 libtinfo-dev libtinfo5-dbg libncurses5-dev libncurses5-dbg libncursesw5 libncursesw5-dev libncursesw5-dbg lib64ncurses5 lib64ncurses5-dev lib32ncurses5 lib32ncurses5-dev lib32ncursesw5 lib32ncursesw5-dev lib64tinfo5 lib32tinfo5 lib32tinfo-dev ncurses-bin ncurses-base ncurses-term ncurses-examples ncurses-doc Architecture: source Version: 6.0+20161126-1+deb9u1 Distribution: stretch Urgency: medium Maintainer: Craig Small <csmall@debian.org> Changed-By: Sven Joachim <svenjoac@gmx.de> Description: lib32ncurses5 - shared libraries for terminal handling (32-bit) lib32ncurses5-dev - developer's libraries for ncurses (32-bit) lib32ncursesw5 - shared libraries for terminal handling (wide character support) ( lib32ncursesw5-dev - developer's libraries for ncursesw (32-bit) lib32tinfo-dev - developer's library for the low-level terminfo library (32-bit) lib32tinfo5 - shared low-level terminfo library for terminal handling (32-bit) lib64ncurses5 - shared libraries for terminal handling (64-bit) lib64ncurses5-dev - developer's libraries for ncurses (64-bit) lib64tinfo5 - shared low-level terminfo library for terminal handling (64-bit) libncurses5 - shared libraries for terminal handling libncurses5-dbg - debugging/profiling libraries for ncurses libncurses5-dev - developer's libraries for ncurses libncursesw5 - shared libraries for terminal handling (wide character support) libncursesw5-dbg - debugging/profiling libraries for ncursesw libncursesw5-dev - developer's libraries for ncursesw libtinfo-dev - developer's library for the low-level terminfo library libtinfo5 - shared low-level terminfo library for terminal handling libtinfo5-dbg - debugging/profiling library for the low-level terminfo library libtinfo5-udeb - shared low-level terminfo library for terminal handling - udeb (udeb) ncurses-base - basic terminal type definitions ncurses-bin - terminal-related programs and man pages ncurses-doc - developer's guide and documentation for ncurses ncurses-examples - test programs and examples for ncurses ncurses-term - additional terminal type definitions Closes: 873723 873746 Changes: ncurses (6.0+20161126-1+deb9u1) stretch; urgency=medium . * Cherry-pick upstream fixes from the 20170701 and 20170708 patchlevels for various crash bugs in the tic library and the tic binary (CVE-2017-10684, CVE-2017-10685, CVE-2017-11112, CVE-2017-11113). * Backport termcap-format fix from the 20170715 patchlevel, repairing a regression from the above security fixes (see #868266). * Cherry-pick upstream fixes from the 20170826 patchlevel for more crash bugs in the tic library (CVE-2017-13728, CVE-2017-13729, CVE-2017-13730, CVE-2017-13731, CVE-2017-13732, CVE-2017-13734, Closes: #873723). * Cherry-pick upstream fixes from the 20170902 patchlevel to fix another crash bug in the tic program (CVE-2017-13733, Closes: #873746). Checksums-Sha1: 02f602e8b2256abdf933cca4c0d52e5541be94a1 3784 ncurses_6.0+20161126-1+deb9u1.dsc 67ed130efd13ad4006b3485024d53e089f213f6b 58888 ncurses_6.0+20161126-1+deb9u1.debian.tar.xz f0a9cb4e590c14940eeeaeeb4017249514f36e39 6468 ncurses_6.0+20161126-1+deb9u1_source.buildinfo Checksums-Sha256: aa957f0ad03a52869ff2e5b80658a9ed3377621594d367eba24816216c709c7b 3784 ncurses_6.0+20161126-1+deb9u1.dsc f6bc08abcdc3b31f50dcdb622c0bfa060d01508653cf7c16a47014ad70375faf 58888 ncurses_6.0+20161126-1+deb9u1.debian.tar.xz ecfa982990a5c0831ceededd4a5943fa201f88e03c5b3b32155c18d93d8972a1 6468 ncurses_6.0+20161126-1+deb9u1_source.buildinfo Files: 215ffa6fc1215b532628411e6c632bf1 3784 libs required ncurses_6.0+20161126-1+deb9u1.dsc c97a6baa83653bb7f08482601f5ae688 58888 libs required ncurses_6.0+20161126-1+deb9u1.debian.tar.xz 3fabb6892d6447a55ba83ce8f1efedfa 6468 libs required ncurses_6.0+20161126-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKF8heKgv5Jai5p4QOxBucY1rMawFAlnHUlkACgkQOxBucY1r May6sw//cpr5peelChCDUlQaF0h0j+hHhy6uGsDDmwHvrTvbib0HGWiOAl7Ceqo8 I3VQGzjrSlRTdZDR06O7ynUNnGvF0YIgTatNQodBtMWF1rMO9dh/649rkYATFCs9 KpO/xS56oseyZupzVhdtjcSE/d1LAPkmnG+6c1lYqISpRtTZqKDEYNVD/hDvEN9z Vjc3rgEuAGy2R8OaW41Jo7u7kRibqnBYeWmNMJ+rHpDwb1L/KXvEwlJhb/4kvTUC ddGXojlByBN5UPlB7Fr6/tZYCxivE82irf6PyzEm5A5X37xMWP/fFd2BPYBsdt3t +EcdTAdK/zbccQol97LPde8kyPFLpyTD14ZhuUa3W1mXyPpbAVhSA4xym4huqrq4 Vq7u0qfL0iR0DFJc6w3kGbjjOhjE00dj28qCttujS7HUWU98PjYTxyXjGV6Oor3R yNcdKSwa0+yeRQkrWc9wF9kXULVZzysnl06FDMEDLzGB+eVvR59H1i42hGIFaNOC nEIG7TOrveANJrI4YspLJnY6DximeCVsv58JUzBeBuyoW3dkpHrE+G5eJvAGflE1 YY20Py9If9Hwne+AGCeKxjC7BjXsW0R3vFem2L8f+qAWN6IKQsEYgaKfTnbOCqTs 24tru4ME2FBk6WpNWUhME4cbaeuknjQnlB5iEgydNsx6nMKzxXQ= =8zGN -----END PGP SIGNATURE-----