Accepted pam-u2f 1.0.7-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 13 Aug 2019 01:06:31 +0200
Source: pam-u2f
Architecture: source
Version: 1.0.7-1+deb10u1
Distribution: buster
Urgency: high
Maintainer: Debian Authentication Maintainers <team+auth@tracker.debian.org>
Changed-By: Nicolas Braud-Santoni <nicoo@debian.org>
Closes: 930021 930023 930047
Changes:
pam-u2f (1.0.7-1+deb10u1) buster; urgency=high
.
* Backport multiple security fixes
+ Fix insecure debug file handling CVE-2019-12209. (Closes: #930021)
+ Fix debug file descriptor leak CVE-2019-12210. (Closes: #930023)
+ Fix a non-critical buffer out-of-bounds access. (Closes: #930047)
.
* Backport a reliability fix
pam-u2f could previously segfault following a failure to allocate a buffer.
Checksums-Sha1:
49a281cf17a8b5db56583553727b0d93d317c480 2138 pam-u2f_1.0.7-1+deb10u1.dsc
68360e338b42f8db16c77ea1cd96b856ba2843ef 56428 pam-u2f_1.0.7-1+deb10u1.debian.tar.xz
75ca5b380694325edc6731cdbbd64fdfebb275d6 6448 pam-u2f_1.0.7-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
4b173ae60c2f8f13f6b4e8e04c6d5f7ed13495c9d33238cd0e1d14ea515d286d 2138 pam-u2f_1.0.7-1+deb10u1.dsc
e5d0e60331a0e16599faae60c713863f7f4e761b9120d097b0c558d66bc185b7 56428 pam-u2f_1.0.7-1+deb10u1.debian.tar.xz
6efe3aaf30d89b81252353352b2cd8521d641539bdaf4b53414453f2caff3f90 6448 pam-u2f_1.0.7-1+deb10u1_amd64.buildinfo
Files:
45334ae640b0e0190c959d7f1fad6208 2138 admin optional pam-u2f_1.0.7-1+deb10u1.dsc
8d0b8abdb6c364e5856fc6cad289262a 56428 admin optional pam-u2f_1.0.7-1+deb10u1.debian.tar.xz
b6e95eeeb26dd53f32ee0aec5bd3485d 6448 admin optional pam-u2f_1.0.7-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=FO85
-----END PGP SIGNATURE-----