Accepted qtsvg-opensource-src 5.15.2-4 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 09 Jan 2022 16:26:35 +0300
Source: qtsvg-opensource-src
Architecture: source
Version: 5.15.2-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Closes: 1002991
Changes:
qtsvg-opensource-src (5.15.2-4) unstable; urgency=medium
.
* Backport upstream commit to do stricter error checking when parsing path
nodes (CVE-2021-45930, closes: #1002991).
* Backport upstream commit to reject oversize SVGs as corrupt.
* Bump Standards-Version to 4.6.0, no changes needed.
Checksums-Sha1:
1e4a7fc4e58555075520b5588a2bedbab262d0c7 2901 qtsvg-opensource-src_5.15.2-4.dsc
3c9b42bccf1cc24647fcc9c484b1417550b3b9cd 14188 qtsvg-opensource-src_5.15.2-4.debian.tar.xz
5563b3cc5d31d91c478bdd485c32f7b2e83ef14f 12575 qtsvg-opensource-src_5.15.2-4_source.buildinfo
Checksums-Sha256:
6e4f433a981d20f9484933858866e5f0e69b291c50fff7c179f76ed23ae6cc58 2901 qtsvg-opensource-src_5.15.2-4.dsc
3e55ebb6eb48953dc17526c37634c7fe90188e338dfb59b2512f73a9e42cae4f 14188 qtsvg-opensource-src_5.15.2-4.debian.tar.xz
70a883b5031ca29166754b82b16a21bd90041875d1485a854c405072b5a85b80 12575 qtsvg-opensource-src_5.15.2-4_source.buildinfo
Files:
2892337417aa8db9016326d841bc21d0 2901 libs optional qtsvg-opensource-src_5.15.2-4.dsc
19c695c70b8585ecd35f53b75adde8d0 14188 libs optional qtsvg-opensource-src_5.15.2-4.debian.tar.xz
1a99beab02be94c2c99605e685facb98 12575 libs optional qtsvg-opensource-src_5.15.2-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=IDXB
-----END PGP SIGNATURE-----