Accepted texlive-bin 2018.20181218.49446-1+deb10u1 (source) into oldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted texlive-bin 2018.20181218.49446-1+deb10u1 (source) into oldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 20 May 2023 14:20:23 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: texlive-bin_2018.20181218.49446-1+deb10u1_source.changes
- Debian-source: texlive-bin
- Debian-suite: oldstable
- Debian-version: 2018.20181218.49446-1+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=Sk494VdnpeVGKoVC/dPP9HyrkDOJmk0EOTSjpJBFBnM=; b=f8cCpE82bS8v2FRVYEAVGEA42S aZq3a6fYEQWWI9lRfWeEEwM6DQ/jg/k2C42tVMpR0Za0a/bhtvAmKYe5GXz1lF+YIcPiolqAJsGqh gJvLuVp/5VMUBliS7qTeF8pUxDKsDvOzqfRKFr891d+e+P5FctTyzQQH3yr+TSZrVybv7NdjXomRS V62IPD8jsl0+HX7eUYQA+vZNcGabLww0t/yzoF90ZCvWf3aK5FnFdK4u2KCy2ym0p9joAS7v3b0z2 bYOQfaV9Y+zOkPgfrJU27gZN7RZH8rUvPHMHpLPisJL40coXzg1ihhH9xMBkzQRwxd3AxoVHDlS9v aMhfSgQQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1q0NRX-0048ZB-05@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 20 May 2023 16:08:13 CEST
Source: texlive-bin
Architecture: source
Version: 2018.20181218.49446-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian TeX Maintainers <debian-tex-maint@lists.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
fe0cbd1f853e8c85c7767bf0f80fd8450aae6723 3607 texlive-bin_2018.20181218.49446-1+deb10u1.dsc
5d60d6d1a91b8cfffd94d0724caca78d77668a64 21264524 texlive-bin_2018.20181218.49446.orig.tar.xz
06318e224ed73b2e46b4dbecf1511d63cc8fb971 1005692 texlive-bin_2018.20181218.49446-1+deb10u1.debian.tar.xz
50d87ccedc20a802db34d7e9e8c3ee3999fcdb61 18278 texlive-bin_2018.20181218.49446-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
c77a3c4482732d8e0f08b67fa6014b4e0a33ca1f8cdbd5dd98dfe9ab30f67c66 3607 texlive-bin_2018.20181218.49446-1+deb10u1.dsc
8afcf62be6632b012dd21512bdd1f29e0d37ba14080548959222d454882ca5c5 21264524 texlive-bin_2018.20181218.49446.orig.tar.xz
cf804af42b75a413427a37acfdf8324f4815979cf92a19b8839c1b0df375c939 1005692 texlive-bin_2018.20181218.49446-1+deb10u1.debian.tar.xz
8fedb54e90c3bf58af57fd0b985e74d453bf186a412e68f9187eb9d8cf316ccd 18278 texlive-bin_2018.20181218.49446-1+deb10u1_amd64.buildinfo
Changes:
texlive-bin (2018.20181218.49446-1+deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2023-32700:
Max Chernoff discovered that improperly secured shell-escape in LuaTeX may
result in arbitrary shell command execution, even with shell escape
disabled, if specially crafted tex files are processed.
Files:
90deb8e70b558098075cb7eabad647a6 3607 tex optional texlive-bin_2018.20181218.49446-1+deb10u1.dsc
be03f007a1da5d1dcfe07710f4310a17 21264524 tex optional texlive-bin_2018.20181218.49446.orig.tar.xz
711b468d74e2fd415d0566c33ba87de7 1005692 tex optional texlive-bin_2018.20181218.49446-1+deb10u1.debian.tar.xz
28ef7730901d3430e6bd911565b6843b 18278 tex optional texlive-bin_2018.20181218.49446-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=0swr
-----END PGP SIGNATURE-----