Accepted libsolv 0.6.24-1+deb9u2 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 30 Jan 2020 18:49:35 +0100
Source: libsolv
Architecture: source
Version: 0.6.24-1+deb9u2
Distribution: stretch
Urgency: medium
Maintainer: Mike Gabriel <sunweaver@debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 949611
Changes:
libsolv (0.6.24-1+deb9u2) stretch; urgency=medium
.
* debian/patches:
+ CVE-2019-20387: Add 0001_CVE-2019-20387.patch. Resolves heap-based
buffer over-read in repodata.c (Closes: #949611).
+ Trivial rebase of patches 1004, 1006 and 2001.
Checksums-Sha1:
97febca618e10f93796af7d74f2ffa2d30fa7a30 2506 libsolv_0.6.24-1+deb9u2.dsc
503846ebbe7824000a2b3922e0a431625f0124b1 14732 libsolv_0.6.24-1+deb9u2.debian.tar.xz
4394fcdc2be7d37ea2db7c0c3b68caf973542af4 9470 libsolv_0.6.24-1+deb9u2_source.buildinfo
Checksums-Sha256:
d4c940c36323bc39bfadf379782307a8c368662aa706f28d8d9fc670d080c0ac 2506 libsolv_0.6.24-1+deb9u2.dsc
dce858f6f56c85f174e4b71dc317a7a285d41a4303c17e0e946714d5f5bded9e 14732 libsolv_0.6.24-1+deb9u2.debian.tar.xz
6cd6860383429eec559cef61433e2925e0fec4d30297ccafd379f6b190b0aef2 9470 libsolv_0.6.24-1+deb9u2_source.buildinfo
Files:
f85989ee9f5c51bb72fda19af0b5c779 2506 admin extra libsolv_0.6.24-1+deb9u2.dsc
2070613c3f703236ea2f3957d989e828 14732 admin extra libsolv_0.6.24-1+deb9u2.debian.tar.xz
a7f36ee3226c12a44658ce91caa3665f 9470 admin extra libsolv_0.6.24-1+deb9u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl4zZXQVHHN1bndlYXZl
ckBkZWJpYW4ub3JnAAoJEJr0azAldxsx7oUP/RsJaMN7zbkwlSiCeO+kjcJYZH6I
paufHcsbJeoCAQn8uZeuaXRV35IvIE4hvKn+Htuwuj29wKvUYOlQbZN20W20NKC7
aw4sx8IPGdjUTEUt3bN1U9yKSMIJijZxkGWXUSJayBHRv+SfPL6xkUMhpFuqJeXS
qDO3HKdsOK3qFlaBLt0/ZxNkKgc3zKrUAiIUazxfreiJRRemJ3/fMdJK1LqIJOnP
XWQiLYD4mLtMJjITrmDvPxbYkYCsLgiSo9z7GGNgaPVlFAoTCxOrkGHjfQF87TUZ
RINaybawgf8qEeGZn5xJM0da3m1aesIX+0b52xHpy9nv/ifq7phSBIaUiV1qNumO
9lWvRm9aqrBmL0+JOc9RlJeRM0XOrq+WODMWepW4lJ9xZv8C19c1f46pDpCPac/c
sKES5aUbwX12D5djk0jmsXRZ+TzsYe6tsfWgQbm0qIkvae5YjlGkOnHB9BzAdWOu
OwjBbqTeFd5CSsj0tuAcJLQ+X5yAd5yleteCOtP1iIEKBeWD7pDRUFOxWaivfb1b
Wdf4EnJdwoe50kWXIWA7w+oMqbam4enukUpaDeFmK9sNQREy6slRdg1ZNfkNBUqw
KxtGebp1PLryA2/JJKHGL3ikgXZpx2kOD09Ju8JRUFtNlgHzWk7D3kqMB5dbJuD4
+ftiP95LaCpiL90Z
=Ymfe
-----END PGP SIGNATURE-----
Reply to: