Accepted aspell 0.60.7~20110707-6+deb10u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 24 Jul 2021 19:03:02 +0200
Source: aspell
Binary: aspell aspell-dbgsym aspell-doc libaspell-dev libaspell15 libaspell15-dbgsym libpspell-dev
Architecture: source amd64 all
Version: 0.60.7~20110707-6+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Agustin Martin Domingo <agmartin@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
aspell - GNU Aspell spell-checker
aspell-doc - Documentation for GNU Aspell spell-checker
libaspell-dev - Development files for applications with GNU Aspell support
libaspell15 - GNU Aspell spell-checker runtime library
libpspell-dev - Development files for applications with pspell support
Closes: 991307
Changes:
aspell (0.60.7~20110707-6+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2019-17544
It was discovered that Aspell incorrectly handled certain inputs which
leads to a stack-based buffer over-read.
An attacker could potentially access sensitive information.
.
[ Agustin Martin Domingo ]
* CVE-2019-25051 (Closes: #991307)
objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow
Checksums-Sha1:
5b8470800b8ccc69a10691926d4e7ae129b0dcef 2368 aspell_0.60.7~20110707-6+deb10u1.dsc
b5a41b92d70740efe7785baaefe1616c69c34637 1876992 aspell_0.60.7~20110707.orig.tar.gz
77c8b732196f7054e571f5624539f99b2c940a58 27568 aspell_0.60.7~20110707-6+deb10u1.debian.tar.xz
c737eb8228d82fed48928ad9241fff106a8340ce 546544 aspell-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
10e9b3a5cc1b3be058375c175439a871deea731d 252032 aspell-doc_0.60.7~20110707-6+deb10u1_all.deb
9254d7f2e138a3130f7a89fff40df7b504ebc87e 8235 aspell_0.60.7~20110707-6+deb10u1_amd64.buildinfo
4347f910b2f1823266b5cc775ec75c8e2cc76f44 225740 aspell_0.60.7~20110707-6+deb10u1_amd64.deb
7eb9d6ebc27d91b342bb826b39dd47a51aefcfb5 32820 libaspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
9302f2570be5dc051b65b422a736c98cf10385cf 2780936 libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
36b9215234db6f8629554381f1e19c1aad224adf 327280 libaspell15_0.60.7~20110707-6+deb10u1_amd64.deb
4665629d14d48b78486be0e9bff033dec7b30926 29900 libpspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
Checksums-Sha256:
b5acf95913c5c273d8ae56d05d41a380666f2db62a30a8abb308c25ae7bccec6 2368 aspell_0.60.7~20110707-6+deb10u1.dsc
71a41224e224af08a0051a9048fc0b4a912acee997d4870cfd68bd7327c45b61 1876992 aspell_0.60.7~20110707.orig.tar.gz
5b607c76d957398ec9b7b5bcd522cc327c5521ac7df525319d14c993c73a859c 27568 aspell_0.60.7~20110707-6+deb10u1.debian.tar.xz
8bdaba3ba5723a68a0ade7d177150ed06d0e62a9f7e888ead2e73f0d1a2de19d 546544 aspell-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
76350b0202142c36a383a882a940ebc03345732a0edd432cc6e4fe80c7eaaa8d 252032 aspell-doc_0.60.7~20110707-6+deb10u1_all.deb
4310fca3205c5ab0f782e4be1f29c318d4bd3bbf2a0b75ee0abe0acf62ded29a 8235 aspell_0.60.7~20110707-6+deb10u1_amd64.buildinfo
ed67305dfee108e07366a7485f5b0c6e8d66aec11464ead25dd66ca3ef3af3b6 225740 aspell_0.60.7~20110707-6+deb10u1_amd64.deb
25fb3748729135b5ed12b858d7f9ea7faa254d1a77c9cc488f9b9ed9c7abaa0f 32820 libaspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
be57f782d88374989f89fe98be187deaba8420217c1301e68358e25da9e5f337 2780936 libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
5c17396579ff532bea08988667d90bad8c169dc1d1f02bd87dbf36e4ec20ce9f 327280 libaspell15_0.60.7~20110707-6+deb10u1_amd64.deb
0b9ab062c99c03c4e2a77ac99f1be546abb791b3483947a879f2b8536dae3070 29900 libpspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
Files:
90927a271af87662f9fed52754d58a6c 2368 text optional aspell_0.60.7~20110707-6+deb10u1.dsc
9a80faddad3222b88c544e93d2ab9579 1876992 text optional aspell_0.60.7~20110707.orig.tar.gz
a612190cf4ac8b4a3124f956deeac250 27568 text optional aspell_0.60.7~20110707-6+deb10u1.debian.tar.xz
2d550c9898455d745494ec23119e01d4 546544 debug optional aspell-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
d9e9c2035fa8de9590821c67d6fd87eb 252032 doc optional aspell-doc_0.60.7~20110707-6+deb10u1_all.deb
b1d9621dc871a8843527b26bac7a520e 8235 text optional aspell_0.60.7~20110707-6+deb10u1_amd64.buildinfo
17b868c96291d352708595d02499eaa5 225740 text optional aspell_0.60.7~20110707-6+deb10u1_amd64.deb
840fe82ad9f1f26b57569ff8c74144ac 32820 libdevel optional libaspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
30211840dc8fd721e4e2664faa54ce85 2780936 debug optional libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_amd64.deb
60d006ac14df2938da1b30f1faf53097 327280 libs optional libaspell15_0.60.7~20110707-6+deb10u1_amd64.deb
2ca8beaa11f72bd66e0ac7d840a8d8b8 29900 libdevel optional libpspell-dev_0.60.7~20110707-6+deb10u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=bThh
-----END PGP SIGNATURE-----