-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 23 Jun 2024 18:25:00 +0200
Source: indent
Architecture: source
Version: 2.2.12-1+deb11u1
Distribution: bullseye
Urgency: low
Maintainer: Santiago Vila <sanvila@debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Closes: 1036851 1049366 1061543
Changes:
indent (2.2.12-1+deb11u1) bullseye; urgency=low
.
* Restore the ROUND_UP macro and adjust the initial buffer size.
Patch from the author, backported from 2.2.13.
Fix memory handling problem. Closes: #1036851.
* Apply two patches by Petr Písař <ppisar@redhat.com>.
- Fix an out-of-buffer read in search_brace()/lexi() on an condition
without parentheses followed with an overlong comment.
- Fix a heap buffer overwrite in search_brace(). Closes: #1049366.
This one is CVE-2023-40305.
* Fix a heap buffer underread in set_buf_break(). Closes: #1061543.
Patch by Petr Písař <ppisar@redhat.com>.
This is CVE-2024-0911.
Checksums-Sha1:
afbc3cf64ca70f96faa5982ab5492f9235eba7f1 1422 indent_2.2.12-1+deb11u1.dsc
2edc75eab44d299f28c192576dea8135496ba7c4 7548 indent_2.2.12-1+deb11u1.debian.tar.xz
63485617a7b8f52b2c98b182415cfde67229ce3a 5632 indent_2.2.12-1+deb11u1_source.buildinfo
Checksums-Sha256:
a04a1522e1f51b43b53530f657314bce3e6816f4c56befb0d9534d91a5619487 1422 indent_2.2.12-1+deb11u1.dsc
c7340890eb5d68e54d42887445c4a381d2fdc472e2e2e87ae9f2db32d40f61e9 7548 indent_2.2.12-1+deb11u1.debian.tar.xz
1356191ccec03e6af318b8550a11689915c515d1788d680ebeca4b289f6f2026 5632 indent_2.2.12-1+deb11u1_source.buildinfo
Files:
328baeac6001744a986aa325025eecdd 1422 devel optional indent_2.2.12-1+deb11u1.dsc
96e0d5482a2d5fe686f0eb6c0db36708 7548 devel optional indent_2.2.12-1+deb11u1.debian.tar.xz
6490e39867536b9b3d55fa0a260efde1 5632 devel optional indent_2.2.12-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE1Uw7+v+wQt44LaXXQc5/C58bizIFAmZ4TdcACgkQQc5/C58b
izI+9Af/XWxKvoWzGeuVM6QtATVS7lNPDPOPdTwyvm9cykA+lXdLsg3JeyVf/VMk
EafNNyjyiiF1GzyNxoQlisX+0djPCCD3Ng6f5ViXeRluWPtS+9CjbcTRCfdb/LuX
ZZednyw7T+g4ZBBJzTqvlpHBnuLODzEyXyEmyFJwWs2iYzs804/aINJjAgCT8y3T
ouwJr8/Bc+8Al2gtGu8TWH2iP/jn1NF3J/EgdX1vzz7xhipLBYI6K937xahN0C/O
ytKWkdCC6yYnK4IrUj5+TuWBdV+DyiczDXzwUAB5vbeOL8J0oa/4BSPwPOoEtb2N
mgAxpZU3PC0iLIingqhpJvFDKWtG9w==
=yiqs
-----END PGP SIGNATURE-----
Attachment:
pgpWyww83AnB8.pgp
Description: PGP signature