Accepted ioquake3 1.36+u20170803+dfsg1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Aug 2017 18:34:40 +0100
Source: ioquake3
Binary: ioquake3 ioquake3-server
Architecture: source
Version: 1.36+u20170803+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Closes: 870725
Description:
ioquake3 - Game engine for 3D first person shooter games
ioquake3-server - Engine for 3D first person shooter games - server and common file
Changes:
ioquake3 (1.36+u20170803+dfsg1-1) unstable; urgency=medium
.
* New upstream snapshot
- Fix read buffer overflow in MSG_ReadBits
(CVE-2017-11721) (Closes: #870725)
- Check buffer boundary exactly in MSG_WriteBits, instead of
potentially failing with a few bytes still available
Checksums-Sha1:
c0563a648b19b81ab125f48e0b61cab31050e508 2282 ioquake3_1.36+u20170803+dfsg1-1.dsc
287ad60bfb5b04238f14593a15a67f2884600fc4 1905260 ioquake3_1.36+u20170803+dfsg1.orig.tar.xz
1b56a93b3584660bf9c71e2078179a5ffa53a032 22224 ioquake3_1.36+u20170803+dfsg1-1.debian.tar.xz
Checksums-Sha256:
64aa514975fd1cdd7ff23fe3e8472453dfe570a3b4c0c9d9da84d9afe6b93292 2282 ioquake3_1.36+u20170803+dfsg1-1.dsc
9d8283fe131b0fc5363cb6bb0896b63a410d51daf4df036b3aaf5ca33c5c4da1 1905260 ioquake3_1.36+u20170803+dfsg1.orig.tar.xz
0dcab0480a605a55cf1651b0510f88eadac6824f0ace8678f7bb4dad2132b570 22224 ioquake3_1.36+u20170803+dfsg1-1.debian.tar.xz
Files:
7daf0055f20249c5c78c2f89e722abbb 2282 games optional ioquake3_1.36+u20170803+dfsg1-1.dsc
7de062ce2c05d41a1f4c3101e226fe61 1905260 games optional ioquake3_1.36+u20170803+dfsg1.orig.tar.xz
f87c2827023bd87fcc8f03bea1b30755 22224 games optional ioquake3_1.36+u20170803+dfsg1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAlmE2y8ACgkQTej/KmPH
zJCxdQ/+N0wddLdzuef9949bd9OOD/JzpZvbdkzhrV6WKFyW3LzCILvLKJYlMuPe
GqW1tf41yl0BI9+OnXNZ2xO5Jxxc2c1mpcCsj5dQegYiLcXkUQ9PFnNesBnucvCF
iB8ITk6J+UG/hPvrJvN/JZWJOd2+YYnFVKPefXZ0GWJqGQNhmG+IX9em+U8z8oBQ
eTdnXi84fhSgYYcr5dOmpjp3vMmoHkHWEdBPKh7T3KHY8nhW54yFL52R81pgwhyA
8cF7SxBrREnNcTa7G0rlQQeUUuDSDM1Ej6cP2GVKYJwLU7WVdxipudJo1DSMwe0s
LN69qjKwEGENmFcjOMff88LerEgMxw/fbX7XFLtmZB3f8jsiqiDl68xjNYCa4rCS
b+4WuxJgWxAtuaYXe1LvUMabuBUlvqxHGDA+87Swv9qJhXL4c6B87jXjqV6pgfk+
P3aPKCor4MBmopfmrZDHo/eEkigGDjbUSRoCZmdH3ugHoWWQPyP8bpX9b0gRjjhP
8C55Mkj2D3yGzFD0dIkzkR9x67W6CmYjd3V7FCCPi4eVcZTKElNQfAbbto46TRRI
4FgyDwdZ6AXbLNjRl0Vn4gxbMqQ8u2HGDTpPxTR/pxt1mxifLWTwQgUF1wCWgUru
K5SWRzRW+kmZVOfooa8EMEVSV9SalV30n/X8cXM9OZCLSHuDF0o=
=2SzJ
-----END PGP SIGNATURE-----