-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jun 2024 18:25:00 +0200 Source: indent Binary: indent indent-dbgsym Architecture: arm64 Version: 2.2.12-1+deb11u1 Distribution: bullseye Urgency: low Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Santiago Vila Description: indent - C language source code formatting program Closes: 1036851 1049366 1061543 Changes: indent (2.2.12-1+deb11u1) bullseye; urgency=low . * Restore the ROUND_UP macro and adjust the initial buffer size. Patch from the author, backported from 2.2.13. Fix memory handling problem. Closes: #1036851. * Apply two patches by Petr Písař . - Fix an out-of-buffer read in search_brace()/lexi() on an condition without parentheses followed with an overlong comment. - Fix a heap buffer overwrite in search_brace(). Closes: #1049366. This one is CVE-2023-40305. * Fix a heap buffer underread in set_buf_break(). Closes: #1061543. Patch by Petr Písař . This is CVE-2024-0911. Checksums-Sha1: 4feed5737b0f69de569c9085ecc7e7e8fa8bed26 84792 indent-dbgsym_2.2.12-1+deb11u1_arm64.deb 352c9266dd022da4a14b564956b6ee5337ecc348 6340 indent_2.2.12-1+deb11u1_arm64-buildd.buildinfo 78310628c720531d93849070d185ac265efa9a06 126164 indent_2.2.12-1+deb11u1_arm64.deb Checksums-Sha256: 41611ebf4e25548fa6a1a0194086d33cf8cc9837a4bdf0de638c50bdc6a16536 84792 indent-dbgsym_2.2.12-1+deb11u1_arm64.deb eeb5bd425aa5746e1757da64e6a7e01026397ea68cb88065c52bd5026ce7cace 6340 indent_2.2.12-1+deb11u1_arm64-buildd.buildinfo 6dd0ebcedc62818cdd1aa1953acd24d9ebac05e7879dc30cc68cdc428a0b8443 126164 indent_2.2.12-1+deb11u1_arm64.deb Files: 7289930ea20b6685959ccbbb638cba7f 84792 debug optional indent-dbgsym_2.2.12-1+deb11u1_arm64.deb 49de0bc93aefc0563ef9966d7b08813a 6340 devel optional indent_2.2.12-1+deb11u1_arm64-buildd.buildinfo 407fd83c418bfb29e5c3fa1d67ec5f43 126164 devel optional indent_2.2.12-1+deb11u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAmaAec0ACgkQ+XaKpT5f kBI9ERAAxmAwZpzaM/8NLbfTgnlao1hKZPe6quT2laAhPDlj0kWReR6m1T7MA5by ihaWtYiNpFV2dGL9J1WtzQ7amOKrWQM892ONJwZa8Lc4NtpU8RG/2fysmQUQbVLf KJDhXVbjZ92dRuBeiXKyOQns/pj5aTsP6ZihlJCpYUKOCEDq6Em/6ZzQAG67wxO3 Fkgzmo5E6ESsCCSQFOCaSAy18G70lhev9wk3Bh9NfzG01U67Dk+1HXRy3e39As4M IHQs/P8vt372ErAvkR29Bgc/WOypfxfbvB6FZqoFCcDgpn9AFnFmvFHQKWshYwHM 6/AqdFi7yNIb6xU1XfuLa0z5o1LW5ZVhyI1zxy2cpKQZs6ynRa7u0T4xY75bg9Fn 04DviE+CESlsnh/uERuZyCzsZc+RMInxtu8//scT7KlRct2IDrZeHSbSWntH9l0i 5+oiExYPRbk/muVIl5grzi0Jr5Fxk4S10+lwn7DjYsWxXVX6g56jP4TxdMeFN3MZ q/1uMiszbEsP3j0mE6J9tI1xC2PqGuPUM/95lTLRXUQjVBLbFUUJ6iQI6qrSPYR3 dHEU+J52bp1G0i0kqNf8h0a23xwKsoR8bxs+83eTH0MGq6lukOvyfSkN5oi+YhDn e66Brh/Hx79H9qSwPEp2ybmWvuCDT1LqlRtCnXjYL4zyfQ5hTcg= =UGnE -----END PGP SIGNATURE-----