Accepted lz4 1.9.3-2 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 05 May 2021 16:29:57 +0900
Source: lz4
Architecture: source
Version: 1.9.3-2
Distribution: unstable
Urgency: medium
Maintainer: Nobuhiro Iwamatsu <iwamatsu@debian.org>
Changed-By: Nobuhiro Iwamatsu <iwamatsu@debian.org>
Closes: 987856
Changes:
lz4 (1.9.3-2) unstable; urgency=medium
.
* Fix CVE-2021-3520. (Closes: #987856)
- This fixed potential memory corruption with negative memmove() size.
- Add d/patches/0005-CVE-2021-3520.patch
Checksums-Sha1:
79055aacafcd61700ffcf62e56ac3195fd6c9e0f 1959 lz4_1.9.3-2.dsc
c88ba8ce9fe530c1c8c873ad9c4846dc0b1af83d 13928 lz4_1.9.3-2.debian.tar.xz
d40750ed64178c3a7d8469571878a642257151a8 7253 lz4_1.9.3-2_amd64.buildinfo
Checksums-Sha256:
215e1f0be1bb40e2b89182f3a1bf630463d8acdc0917f1f928ad1bf9ef3e1b0c 1959 lz4_1.9.3-2.dsc
d7754a7b7b1fa196666d6459705107355e15fef162352e363e43722e012a04e3 13928 lz4_1.9.3-2.debian.tar.xz
57ac06e146f2bc27f9307399ab166e7ac79e3c650e049ff72c4b9d55ef8103e4 7253 lz4_1.9.3-2_amd64.buildinfo
Files:
4e73874ad5a200506b20051d364a9cf8 1959 utils optional lz4_1.9.3-2.dsc
c07c5384dfb72c23795f59b8326a38b0 13928 utils optional lz4_1.9.3-2.debian.tar.xz
b903ac4d0aad952b6c6d90b39dad2afa 7253 utils optional lz4_1.9.3-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZpAD
-----END PGP SIGNATURE-----