Accepted gupnp 1.0.5-0+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 04 Aug 2020 13:01:44 +0200
Source: gupnp
Architecture: source
Version: 1.0.5-0+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Changes:
gupnp (1.0.5-0+deb10u1) buster; urgency=medium
.
* New upstream stable release.
* CVE-2020-12695: CallStranger prevention.
+ Needs GSSDP 1.0.5.
* Fix a UAF in the CVE-2020-12695 changes.
Checksums-Sha1:
2ec7879ead7c1cfe5806637c7c6d9407e009829c 2524 gupnp_1.0.5-0+deb10u1.dsc
5e7b271dcccc556d35abb10a22087e05b0f7521c 428060 gupnp_1.0.5.orig.tar.xz
7b901a164ba54c905358415e8442e3827a72de51 10004 gupnp_1.0.5-0+deb10u1.debian.tar.xz
0ecff8861e2745e50010849c2dc1f0573cbf61c1 9786 gupnp_1.0.5-0+deb10u1_source.buildinfo
Checksums-Sha256:
f9f4b5cbb9fb4eba9940860ecc88fe1c8aa14b379842dde5a2f598b38d7338c1 2524 gupnp_1.0.5-0+deb10u1.dsc
e9359fa8ed70c3c2b2b987869262ebb5c5ed1365726b7a9e8e59b3471e5c37f5 428060 gupnp_1.0.5.orig.tar.xz
63e9da19115ed35ede289dcc025ae8ceffc90c5f5d63fd5abd755ffce0b24f82 10004 gupnp_1.0.5-0+deb10u1.debian.tar.xz
dc7858b09c0e8880f7f7120e8d826f7e9985a52e3158d5984d95c8e2d18db979 9786 gupnp_1.0.5-0+deb10u1_source.buildinfo
Files:
099f4563cb51f569de450fb6c12023f1 2524 libs optional gupnp_1.0.5-0+deb10u1.dsc
9db072f3b388dc5e9d4aa8da945f536e 428060 libs optional gupnp_1.0.5.orig.tar.xz
e45de93be7cba0b5872a413bfab8ca94 10004 libs optional gupnp_1.0.5-0+deb10u1.debian.tar.xz
81827cf961605febc72d33ebf774581c 9786 libs optional gupnp_1.0.5-0+deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=v15D
-----END PGP SIGNATURE-----