Accepted libxpm 1:3.5.12-1.1~deb11u1 (source) into proposed-updates
- To: debian-changes@lists.debian.org
- Subject: Accepted libxpm 1:3.5.12-1.1~deb11u1 (source) into proposed-updates
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sun, 12 Feb 2023 19:32:11 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: libxpm_3.5.12-1.1~deb11u1_multi.changes
- Debian-source: libxpm
- Debian-suite: proposed-updates
- Debian-version: 1:3.5.12-1.1~deb11u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=X+DGtXeBfdOVhxKnNRB/GKbwRl4DC+0UmdVTcnYF3F4=; b=c/lVz6YlRoWeyts2UmInqa2Fhe oSY8y2zbbbV7uVcj+Uc/v+4fE4idmNnDotnJiAgzLu8JE35z5P0cduZXCFOHPB0qCMbqkEBgVDetp aoiRTS/QEF0E88xtNit6wUcF8qeZxxo9ShZ0teRe3ZkK5eerU1115lEWw5GQ6c0xOlfUFPt1MKOkD AEXgZoyuCo6SGgr3xr0KuLX7OrK6r9cur5bxpTAd3PBRWNG11QQYx4psmiXFAx885W2gX5J0K/M3G ge/o3SGMaP/nuN+4ma4tMh+gpsyPTqQ3FYQ93dzb98bfp7hbjKGlmJg2t/jNpPmk3Nys9e+lkJ7he 9hmFR0Jg==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pRI55-00D0n9-CJ@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 25 Jan 2023 21:19:41 +0100
Source: libxpm
Architecture: source
Version: 1:3.5.12-1.1~deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
libxpm (1:3.5.12-1.1~deb11u1) bullseye; urgency=medium
.
* Non-maintainer upload.
* Rebuild for bullseye
.
libxpm (1:3.5.12-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Fix CVE-2022-46285: Infinite loop on unclosed comments
* Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height
* configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE
* Fix CVE-2022-4883: compression commands depend on $PATH
* Prevent a double free in the error code path
* Use gzip -d instead of gunzip
* debian/rules: configure: Set explicitly runtime paths for {,un}compress
and gzip.
Checksums-Sha1:
8fb8e6122347203c953c24a963d5a802ae8375c2 2259 libxpm_3.5.12-1.1~deb11u1.dsc
137590d2e2add47a6160079cce68bd6a9b3a1f51 14685 libxpm_3.5.12-1.1~deb11u1.diff.gz
Checksums-Sha256:
8e5868cf0cdb57eb45e092b0605daf5aa21d45a28d065ef1be93fdc291fb5062 2259 libxpm_3.5.12-1.1~deb11u1.dsc
c589470f31997e94b3c9754966d4be1cf0ebc5a5ce802b0838dd6887986f7d45 14685 libxpm_3.5.12-1.1~deb11u1.diff.gz
Files:
4de8599b9dab4302e103d077d43346f7 2259 x11 optional libxpm_3.5.12-1.1~deb11u1.dsc
06830be78e863115624fa24cc1ac1e6c 14685 x11 optional libxpm_3.5.12-1.1~deb11u1.diff.gz
-----BEGIN PGP SIGNATURE-----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=OpzB
-----END PGP SIGNATURE-----