-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 04 Oct 2022 00:14:59 +0200
Source: libconfuse
Architecture: source
Version: 3.3-2+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Aurelien Jarno <aure...@debian.org>
Changed-By: Aurelien Jarno <aure...@debian.org>
Closes: 1019596
Changes:
libconfuse (3.3-2+deb11u1) bullseye; urgency=medium
.
* Add debian/patches/CVE-2022-40320.patch from upstream to fix a heap-based
buffer over-read in cfg_tilde_expand (CVE-2022-40320). Closes: #1019596.
Checksums-Sha1:
627a10fb71daedb1cc75af6126507e45489bfc25 2093 libconfuse_3.3-2+deb11u1.dsc
176e4a48e8cddbb3a169d7fb75fb7a21a6998e3f 7580
libconfuse_3.3-2+deb11u1.debian.tar.xz
18570118a6cbf2835f606af78b04eff883ec7271 5723
libconfuse_3.3-2+deb11u1_source.buildinfo
Checksums-Sha256:
5fd6337ea24f7b405f69d0bfe07a08f3a459d921f9a70b3936bb74ec735f1ef2 2093
libconfuse_3.3-2+deb11u1.dsc
2029b5ed8c8d1888d63b4b4445249ceeb5f687af006d3a2ba32259d8225810ea 7580
libconfuse_3.3-2+deb11u1.debian.tar.xz
eaca798b673f9bf5088bfe89c04ad61a127059ccc3c7a85f4c9048bae56b679f 5723
libconfuse_3.3-2+deb11u1_source.buildinfo
Files:
020fb2b834459318ea07ada5947cbfe8 2093 libs optional
libconfuse_3.3-2+deb11u1.dsc
c186ed801ab7d62cb21f056a3abc8c3f 7580 libs optional
libconfuse_3.3-2+deb11u1.debian.tar.xz
7ad17b0daedfe69fa23fc43718aa3bcf 5723 libs optional
libconfuse_3.3-2+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=TvCp
-----END PGP SIGNATURE-----
