-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Jul 2025 01:31:49 +0200
Source: snapcast
Architecture: source
Version: 0.23.0+dfsg1-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Felix Geyer <fgeyer@debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Changes:
snapcast (0.23.0+dfsg1-1+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the Debian LTS team.
* d/patches/CVE-2023-36177.patch: Add patch to fix CVE-2023-36177.
- Mitigate an RCE vulnerability by disallowing process stream types.
Checksums-Sha1:
752682827579f9ffea1fa0afd36a56ce5f93ca1d 2127 snapcast_0.23.0+dfsg1-1+deb11u1.dsc
506d4abfa8bfdd4262ccbf17e8c00202471fa283 893412 snapcast_0.23.0+dfsg1.orig.tar.xz
712c84de62b87e5f7b1295eefda462811c2baec8 6976 snapcast_0.23.0+dfsg1-1+deb11u1.debian.tar.xz
6a4a6205a57f2ae5d8dc86cabeae5e847dc9cc7d 10504 snapcast_0.23.0+dfsg1-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
bdbc8d61290a5c2bf282c1814edddf4f4a34f90f6944134f677a86c2961de566 2127 snapcast_0.23.0+dfsg1-1+deb11u1.dsc
287161ed1551efaf0dda6aab8381b1b3a2b6f4ac1d2c0cd4c39e35fffbb18585 893412 snapcast_0.23.0+dfsg1.orig.tar.xz
56911596bd6471967360ee9134ffe03515f97b788f069c65ca0f2c177123c7e0 6976 snapcast_0.23.0+dfsg1-1+deb11u1.debian.tar.xz
fe671091cf8cb65323b253a9a6d6e92ddd2d77976db2948f8cb646f5f6bcbe6e 10504 snapcast_0.23.0+dfsg1-1+deb11u1_amd64.buildinfo
Files:
8096169c22561e4c94e4ddbc86cdc38a 2127 sound optional snapcast_0.23.0+dfsg1-1+deb11u1.dsc
a068db3ea85143b16fb941f83bf343d6 893412 sound optional snapcast_0.23.0+dfsg1.orig.tar.xz
9b67aa1a454313b6ccf78bfedbe17907 6976 sound optional snapcast_0.23.0+dfsg1-1+deb11u1.debian.tar.xz
dc6661ad8826709ec111c6b605470f49 10504 sound optional snapcast_0.23.0+dfsg1-1+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=5FZC
-----END PGP SIGNATURE-----
Attachment:
pgphEtQLPNIhE.pgp
Description: PGP signature