Accepted yaml-cpp 0.6.3-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 29 Apr 2020 20:24:07 -0500
Source: yaml-cpp
Architecture: source
Version: 0.6.3-1
Distribution: unstable
Urgency: medium
Maintainer: Simon Quigley <tsimonq2@debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Closes: 859891 870326 918145 918147 919430 919432 958505
Changes:
yaml-cpp (0.6.3-1) unstable; urgency=medium
.
* New upstream release (Closes: #958505).
- Refresh patches.
- BUILD_SHARED_LIBS -> YAML_BUILD_SHARED_LIBS cmake flag.
- Update symbols from amd64 build log.
* Add the following CVE patches:
- fix-CVE-2017-11692.patch
+ Fixes CVE-2017-11692 (Closes: #870326).
- fix-unbounded-recursion-depth.patch
+ Fixes CVE-2017-5950 (Closes: #859891).
+ Fixes CVE-2018-20573 (Closes: #918147).
+ Fixes CVE-2018-20574 (Closes: #918145).
+ Fixes CVE-2019-6285 (Closes: #919432, 919430).
* Migrate to using the debhelper-compat dependency.
* Bump Standards-version to 4.5.0, no changes needed.
* Migrate to debhelper 13.
Checksums-Sha1:
1c3c46e2da4e4bd37a62addbb6f6cdfff0452e94 1910 yaml-cpp_0.6.3-1.dsc
98d98632b3a62fdf1172442f8ad8190fc11cbef7 1398768 yaml-cpp_0.6.3.orig.tar.gz
b120e27ca45b2e0f03569c8222058a9995dd7a5b 9896 yaml-cpp_0.6.3-1.debian.tar.xz
674944ff77e503f96a91572d84bbf1779de2fff1 7225 yaml-cpp_0.6.3-1_source.buildinfo
Checksums-Sha256:
a5f7e645c78cfb5addd85526a974266ce7483c61e8cacff72bce03d925eb59b0 1910 yaml-cpp_0.6.3-1.dsc
77ea1b90b3718aa0c324207cb29418f5bced2354c2e483a9523d98c3460af1ed 1398768 yaml-cpp_0.6.3.orig.tar.gz
eaad5203b2d53f95017883860dbf595c5457e7fafc4c7ed5dc62abe45644b52d 9896 yaml-cpp_0.6.3-1.debian.tar.xz
096956a8aa3c64dbb32c7ba5f3333dc74f9a8391ba3849704a8bec04ddd1ee10 7225 yaml-cpp_0.6.3-1_source.buildinfo
Files:
6a8128dc53ac49e2ba956446aeae937d 1910 devel optional yaml-cpp_0.6.3-1.dsc
b45bf1089a382e81f6b661062c10d0c2 1398768 devel optional yaml-cpp_0.6.3.orig.tar.gz
77679e67e83f27757eff8821cee2acd2 9896 devel optional yaml-cpp_0.6.3-1.debian.tar.xz
75f45dc40e73a04c140d77b7fca17986 7225 devel optional yaml-cpp_0.6.3-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=tP7p
-----END PGP SIGNATURE-----
Reply to: