-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 15 Aug 2018 10:46:39 +0200 Source: confuse Binary: libconfuse1 libconfuse-common libconfuse-dev Architecture: source Version: 3.0+dfsg-2+deb9u1 Distribution: stretch Urgency: medium Maintainer: Aurelien Jarno <aurel32@debian.org> Changed-By: Aurelien Jarno <aurel32@debian.org> Description: libconfuse-common - Common files for libConfuse libconfuse-dev - Development files for libConfuse libconfuse1 - Library for parsing configuration files Closes: 904159 Changes: confuse (3.0+dfsg-2+deb9u1) stretch; urgency=medium . * Add debian/patches/CVE-2018-14447.patch from upstream to fix an out of bound read in trim_whitespace (CVE-2018-14447). Closes: #904159. Checksums-Sha1: 55fb9dce61cb1cba984ebfe8404433f579b6e325 1934 confuse_3.0+dfsg-2+deb9u1.dsc 84f475f4e0cc9ce5fd303d6aa7600c467acde4f0 4392 confuse_3.0+dfsg-2+deb9u1.debian.tar.xz 56f6ab25c93b9528c82291a692cdebfded203de4 5970 confuse_3.0+dfsg-2+deb9u1_source.buildinfo Checksums-Sha256: 08e40f2c43a22d8970dd46320fac1adda840fbcfc342042895df28ef997cab1b 1934 confuse_3.0+dfsg-2+deb9u1.dsc cc6dec8a29c5e6bf0e998e55e0c9d42f1d9f0bafe2b5bd05d7b89394afb7f366 4392 confuse_3.0+dfsg-2+deb9u1.debian.tar.xz 7f52ef0a655d1ff95a518339c44765e33e12fca0681488ed7a6bf7fca49fd638 5970 confuse_3.0+dfsg-2+deb9u1_source.buildinfo Files: 0e80794a3824ce43ebf0259298ec910f 1934 libs optional confuse_3.0+dfsg-2+deb9u1.dsc eb8184e6d56ed050e7beeee30b2a21cf 4392 libs optional confuse_3.0+dfsg-2+deb9u1.debian.tar.xz 965fe43680dd11c22056c1f46c2b08b3 5970 libs optional confuse_3.0+dfsg-2+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUryGlb40+QrX1Ay4E4jA+JnoM2sFAltz6KAACgkQE4jA+Jno M2vWVw/+M3/wPmSEWvrzVjRhoDT1smw0ZZLzXXDVan3ajXLPZ44fLlFF+D8R0mG9 8rF0WwnEH3sjc5VdctgjAqQf+xBF08jqyz1T9PBcRkNvhXZYWUGCRzmZCo2QhKfQ CPRNxlUldoMRprhN9WLY2DaY7DgV6PHM+sBJG2BxvfOEMwF+nhHNZNqw8p73Xg2v au40G+62RrcECjTqU11G71fFMK1y7pdCsDezDTpdOpse4TRWDwjWn9Nv9KBGsqfW 84ah2geP89hjvXW/am/oPqz0FmQtinCSpzVRWyzAKuuECZYznlhkzEKmqkWGSBiq 7YWjbvioFUe439LsPTN1Vw33nhL0aaB+wryGqD+hNQf1xdYJvTXGWhY1NEvNI9oZ QNLWt6NVoH25wzUzSwGnLzaBRkVrBsfAXRq2C646+QQTftgfm7RY1CDiiZv9XItg OrOcyP5WHUlxpZEhRRCiU0hTHbzPooQ5px58fx5boppUmpPKVG+6PbJuab7g66D+ c0w9lGbrSjo9FZpLI2PZctiSTiiYsLWuTWriL/eTXRpCLWYUHRcX7LcpIryyeXJu pI8XXldoQuzLu8yCAm9PQkkCyFPxr1SZu8jK4rGgn/a7TWbfEyxeV3qbvIcY0KyH cdJIOrrxnkoXprX2qJ0i4JpySNULTn/3SreWiDrUGrs0IgMNhHg= =WU9P -----END PGP SIGNATURE-----