Accepted fig2dev 1:3.2.7a-5+deb10u5 (source) into oldstable
- To: dispatch@tracker.debian.org, debian-lts-changes@lists.debian.org
- Subject: Accepted fig2dev 1:3.2.7a-5+deb10u5 (source) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 31 Jan 2023 19:50:21 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: fig2dev_3.2.7a-5+deb10u5_source.changes
- Debian-source: fig2dev
- Debian-suite: oldstable
- Debian-version: 1:3.2.7a-5+deb10u5
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=ld4pW3vp37nM0g83hrMtayX4cAlrd7NmJJ3MByzFKmY=; b=JtuTk11U+hM55DPWrxk0eLC/uc 6YWbUwDV7ML/RugqBuFVaj+jx+R1m9V1flFNQd5oyqAb6r8vFnvW5vu8QHNknWbR5eR7ZkDll6tIh l3EpQ0oAF8JcsZHXgEZ/ZSZ8sHtR2CNJpPKzeRfCawwkTpkxE0xWRJo5FcBtDYT1D0eVfZGI7OICL OqvkZxIfVlVs9heVU4+fx5TDeVCEgTB2uENeK5D276qixix+8pbVWE9q+OBx9PWDVXrb4TrtyKOoT GIt6hc8ccCbK1ikbbPrIzWXcoeyJqsRzv7AOEpU19PFXTdBJ7/PTpzAIMsA/piXG0FmhEbV+PtLxC HyoNUxdw==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1pMwe5-0087m6-EZ@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 31 Jan 2023 19:26:31 +0200
Source: fig2dev
Architecture: source
Version: 1:3.2.7a-5+deb10u5
Distribution: buster-security
Urgency: medium
Maintainer: Roland Rosenfeld <roland@debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Changes:
fig2dev (1:3.2.7a-5+deb10u5) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS team.
* CVE-2020-21529: Stack buffer overflow in bezier_spline().
* CVE-2020-21531: Global buffer overflow in conv_pattern_index().
* CVE-2020-21532: Global buffer overflow in setfigfont().
* CVE-2020-21676: Stack-based buffer overflow in genpstrx_text().
* CVE-2021-32280: NULL pointer dereference in compute_closed_spline().
Checksums-Sha1:
6bdc1e4a9c59a55e1e2b0a31e81a7904f6c11e5a 2264 fig2dev_3.2.7a-5+deb10u5.dsc
279af6b65f95f0543c3bed6658096f28b738b40e 507288 fig2dev_3.2.7a.orig.tar.xz
f9d8652e116c377c4d8ac07f7bb1d81c0d019d89 234600 fig2dev_3.2.7a-5+deb10u5.debian.tar.xz
Checksums-Sha256:
9a73860b0072759c30684e25e907fabb01b9999b7a80950720faaa0de57400f6 2264 fig2dev_3.2.7a-5+deb10u5.dsc
bda219a15efcdb829e6cc913a4174f5a4ded084bf91565c783733b34a89bfb28 507288 fig2dev_3.2.7a.orig.tar.xz
9da7b9815083a63619354476ee1376d8a38691bdb9e40ab26117a46a8e459e05 234600 fig2dev_3.2.7a-5+deb10u5.debian.tar.xz
Files:
0e508fe12a4620436ee03857e20dbf73 2264 graphics optional fig2dev_3.2.7a-5+deb10u5.dsc
7988476d461552ccfb163b3b16a6161c 507288 graphics optional fig2dev_3.2.7a.orig.tar.xz
4018edeeb651486a57b883d3de9c4563 234600 graphics optional fig2dev_3.2.7a-5+deb10u5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=cYkp
-----END PGP SIGNATURE-----