Accepted discount 2.2.2-1+deb9u1 (source amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Sep 2018 22:43:24 +0200
Source: discount
Binary: discount libmarkdown2 libmarkdown2-dev
Architecture: source amd64
Version: 2.2.2-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
discount - implementation of the Markdown markup language in C
libmarkdown2 - implementation of the Markdown markup language in C (library)
libmarkdown2-dev - implementation of the Markdown markup language in C (dev files)
Changes:
discount (2.2.2-1+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload.
* Fix CVE-2018-11468, CVE-2018-11503, CVE-2018-11504 and CVE-2018-12495.
Several heap-based buffer over-reads were found in discount that allowed
remote attackers to cause a denial-of-service via specially crafted files.
Checksums-Sha1:
e2fb0ed4cdb2b1c214c05f281fa0b3f17caa310c 2169 discount_2.2.2-1+deb9u1.dsc
a9a8dbb0e06f7fe09f534a76f5a0a9a32d0d5499 111571 discount_2.2.2.orig.tar.gz
517eaa3c9fc904d42fcbd453e193164584b8c3ea 5772 discount_2.2.2-1+deb9u1.debian.tar.xz
580b42ba1e41b3ba9c103d1e7b57896e2494e4ec 32172 discount-dbgsym_2.2.2-1+deb9u1_amd64.deb
e864c15d055d035b63564c64b1ec063423296c30 7079 discount_2.2.2-1+deb9u1_amd64.buildinfo
8cac6daf26af393b4b5f04534ce8ccc11c9f5a32 22770 discount_2.2.2-1+deb9u1_amd64.deb
bfd8c74a7166d92609bb4ad885dd258388314a08 75832 libmarkdown2-dbgsym_2.2.2-1+deb9u1_amd64.deb
4bf5788468685a7354a6b45223b0fce90b0feef2 22566 libmarkdown2-dev_2.2.2-1+deb9u1_amd64.deb
ee6bff77e7beb0ebdb429ba7f5397ffcfb5f9f18 35524 libmarkdown2_2.2.2-1+deb9u1_amd64.deb
Checksums-Sha256:
cad7e9ee7f69c9f32b779b1271f14fa66c10bf7877a2464aea8ee00c0ff9c1c4 2169 discount_2.2.2-1+deb9u1.dsc
94dabda30832b027e49eb26b4a0f36ae3a73247fc9bd066d7f83af8e50e29734 111571 discount_2.2.2.orig.tar.gz
1beb1bf00d09a34063d8e3e98901985818926b251ed0146a7ee77318bfc2820c 5772 discount_2.2.2-1+deb9u1.debian.tar.xz
74336a14e06bcdd04c55973a3917cb72766cca04e1572d4e6f70e58fd284bd2a 32172 discount-dbgsym_2.2.2-1+deb9u1_amd64.deb
03263579b54ffce61e705db396a4655aadd431458424a8f46b380f90f974dc30 7079 discount_2.2.2-1+deb9u1_amd64.buildinfo
059224e31cfc8f935252badae3fe7f74f334fdc0f66374220584f31dd543fd4d 22770 discount_2.2.2-1+deb9u1_amd64.deb
a0ae8d6ef4d1bb542f29cc3cd0d7a6438c9b8ccf51b1dbd8bd3319a08826d3bb 75832 libmarkdown2-dbgsym_2.2.2-1+deb9u1_amd64.deb
d94eb4f82f2bc8df2a8ab5eb138ba5445633d08439b22f09178ed79e73e8e836 22566 libmarkdown2-dev_2.2.2-1+deb9u1_amd64.deb
d1c90f23db0d9fce3ed0a8b9434fc594e36533d43a3589946ddc4172e4f77bf7 35524 libmarkdown2_2.2.2-1+deb9u1_amd64.deb
Files:
07623194f8c57a134e7912fad8cffee6 2169 text optional discount_2.2.2-1+deb9u1.dsc
c6556af37f3c9ff189f87fb95b9b5ab8 111571 text optional discount_2.2.2.orig.tar.gz
e92ca672192e161c8d97fedca4eb6423 5772 text optional discount_2.2.2-1+deb9u1.debian.tar.xz
f8560df96fabb2d7e60679cafa0338d7 32172 debug extra discount-dbgsym_2.2.2-1+deb9u1_amd64.deb
298517ee37d7d1930a7777d820feb147 7079 text optional discount_2.2.2-1+deb9u1_amd64.buildinfo
eaca164b2cc6424601925804b016fb09 22770 text optional discount_2.2.2-1+deb9u1_amd64.deb
9b068882af72726eeeec7b8d32a75f42 75832 debug extra libmarkdown2-dbgsym_2.2.2-1+deb9u1_amd64.deb
e671fbe7b7d4548c1fa43c6b8c78ad03 22566 libdevel optional libmarkdown2-dev_2.2.2-1+deb9u1_amd64.deb
072611f4ee1100cc5d4016e72a7704ba 35524 libs optional libmarkdown2_2.2.2-1+deb9u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Msca
-----END PGP SIGNATURE-----