Accepted atril 1.20.3-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 16 Dec 2019 10:33:35 +0100
Source: atril
Architecture: source
Version: 1.20.3-1+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian+Ubuntu MATE Packaging Team <debian-mate@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 927821
Changes:
atril (1.20.3-1+deb10u1) buster; urgency=medium
.
[ Martin Wimpress ]
* debian/patches:
+ Add 0001_prevent_no_doc_segfault.patch. Prevent segfaults when no document
is loaded.
+ Add 0002_CVE-2019-1010006.patch. Fix buffer overflow. (CVE-2019-1010006)
.
[ Mike Gabriel ]
* debian/patches:
+ Add CVE-2019-11459.patch. tiff: Handle failure from
TIFFReadRGBAImageOriented. (Closes: #927821).
+ Rebase 0001_prevent_no_doc_segfault.patch.
Checksums-Sha1:
932d7c680f746383ccac91eed2c4039cfdea941e 3107 atril_1.20.3-1+deb10u1.dsc
3607327893a3b52a7a6d7299d1a1b910c8b74fad 21908 atril_1.20.3-1+deb10u1.debian.tar.xz
13121d1c5ffa4ddebeec39c3e8a22dd7b9232660 19264 atril_1.20.3-1+deb10u1_source.buildinfo
Checksums-Sha256:
c09ee3994058966361d35ecb13468af5dd0e956ee908351a3fcd5ad743ebb54c 3107 atril_1.20.3-1+deb10u1.dsc
a6ff7ff7f75edfb3b96b57aeaa0e8555e2b32c8158f87cf6d0cfc9c831b32022 21908 atril_1.20.3-1+deb10u1.debian.tar.xz
ede82a8fa577299ce1089cc9b70b2fb7b76d1999078fd95d8e4dc956878e1142 19264 atril_1.20.3-1+deb10u1_source.buildinfo
Files:
baae287c7324cfef728c28dac84141e8 3107 x11 optional atril_1.20.3-1+deb10u1.dsc
efee7e86285e0c3f8220dfb6c35e6a9c 21908 x11 optional atril_1.20.3-1+deb10u1.debian.tar.xz
7e0428c3dbeadd416fa74b0528539208 19264 x11 optional atril_1.20.3-1+deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=0dUy
-----END PGP SIGNATURE-----