Accepted libidn2 2.0.5-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jan 2020 23:15:38 +0100
Source: libidn2
Architecture: source
Version: 2.0.5-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Libidn team <help-libidn@gnu.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 942895 949705
Changes:
libidn2 (2.0.5-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix free of random (stack) value in idn2_to_ascii_4i()
* idn2_to_ascii_4i(): Restrict output length to 63 (CVE-2019-18224)
(Closes: #942895)
* Fail make if 'ronn' doesn't exist when building docs
* Fix generation of idn2.1 man page file
* Move texinfo from Build-Depends-Indep to Build-Depends (Closes: #949705)
Checksums-Sha1:
bded069a9cfc83faeead5a1b817cc22668bdf898 2501 libidn2_2.0.5-1+deb10u1.dsc
91a5122511f87aaaa3f1b700f23c487aaf0dbd9e 2091929 libidn2_2.0.5.orig.tar.gz
40e6d1b1a8e25ae4f799703087d1ac4cd44b3f97 10286540 libidn2_2.0.5-1+deb10u1.debian.tar.xz
Checksums-Sha256:
6c4eac5dc85983e4cf37ee8deea5e23cfb9e1620f7a94a858726676c8858b498 2501 libidn2_2.0.5-1+deb10u1.dsc
53f69170886f1fa6fa5b332439c7a77a7d22626a82ef17e2c1224858bb4ca2b8 2091929 libidn2_2.0.5.orig.tar.gz
37cfdc06e4e2f03e932af5bb309cbe94f8466f8b347aa34fa7c1e03a425556b2 10286540 libidn2_2.0.5-1+deb10u1.debian.tar.xz
Files:
b29eb22f7dd8e80e73f2ca7b32225f27 2501 libs optional libidn2_2.0.5-1+deb10u1.dsc
eaf9a5b9d03b0cce3760f34b3124eb36 2091929 libs optional libidn2_2.0.5.orig.tar.gz
e9a6a022a92476fcb233d8c0a3cd245f 10286540 libs optional libidn2_2.0.5-1+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl4zWldfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89E58AQAKAC9d15tIIlnGUs+LnZCqex5l1N8L3j
GXQqtiQziTC3fW4S/v/EkuqluL3QJvZL3Of9qhZ6hwsHL1JGgeqydwoRrcBvDXRQ
aL0YTC8Jv6+zvIgOZ7oRaC+dx5vIi73uZ8bS8p01JHqKrm2oFxYTGosgHL56bUfp
9XItBi8kOtPiGOMkVfU2vajgFKWmnAvj/acy2yVWLqtGnPCWH5Up6/CnKJOSb02p
CxU73zPe/qQBz0NUY+6zgwFdYTBdMR4BC9+GJ6/aKI8YVoad72L/nh8aEooQltRU
GPOP31MAVgWI0WyDmvwYIa0koEj7OCvcZQbQo214/yBXVLeiHDutuZCtZGZlu3J9
CF7N4b3Cnl3WIGhaut5Vd7Ha3BYRypZY8niAQXf+ks1mTfc+jHdHDvF8HhkDMtVy
H5QFDT6ZsVXAvvo9l5DUHLRL++E/Uc8c0cP/XvAzsmtAFfPpVSGawLERbzaaI/N7
j73DPWryJDo0TU/FCLL++Om5ps1DIWPR1x0LIxPqCoI7h1/84n3/gxSY0QhCkBtY
GIYhwSzL8WXu8EC7PLsyIrAZvXtwLApw3Am9b+nleaPS33TcuZdxVDWtjAcfuw7U
1T8NQYYE4Ui0Yov+XGTAOXTukfyVlZMzcN73zHsKWVL1Lu+cH7jIJ5qLL++yse4g
AktOoMwIE6oM
=cHeG
-----END PGP SIGNATURE-----