-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jun 2024 18:25:00 +0200 Source: indent Binary: indent indent-dbgsym Architecture: ppc64el Version: 2.2.12-1+deb11u1 Distribution: bullseye Urgency: low Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Santiago Vila Description: indent - C language source code formatting program Closes: 1036851 1049366 1061543 Changes: indent (2.2.12-1+deb11u1) bullseye; urgency=low . * Restore the ROUND_UP macro and adjust the initial buffer size. Patch from the author, backported from 2.2.13. Fix memory handling problem. Closes: #1036851. * Apply two patches by Petr Písař . - Fix an out-of-buffer read in search_brace()/lexi() on an condition without parentheses followed with an overlong comment. - Fix a heap buffer overwrite in search_brace(). Closes: #1049366. This one is CVE-2023-40305. * Fix a heap buffer underread in set_buf_break(). Closes: #1061543. Patch by Petr Písař . This is CVE-2024-0911. Checksums-Sha1: 111ada15c1770926297cb67ec49b0e86a3df3667 88024 indent-dbgsym_2.2.12-1+deb11u1_ppc64el.deb 0f92c3dd139235a12af2abede8fcf398947d91a7 6388 indent_2.2.12-1+deb11u1_ppc64el-buildd.buildinfo e8050eef3413531a4eeaf50294ee9b5f2f237b09 129896 indent_2.2.12-1+deb11u1_ppc64el.deb Checksums-Sha256: 2dec58925d95057f4053c896f9960d7f332ef0371d34351150b00e5012a1552b 88024 indent-dbgsym_2.2.12-1+deb11u1_ppc64el.deb 2f89f77fe8c0ee567e172b6a94c0f908052eba6978764a5e706071e46a705fb0 6388 indent_2.2.12-1+deb11u1_ppc64el-buildd.buildinfo de6c0e0459dc8f0f921b0521660a5687584050a2493539133773453d692ee199 129896 indent_2.2.12-1+deb11u1_ppc64el.deb Files: 48529d5e8af98005656c9114fcd44d0d 88024 debug optional indent-dbgsym_2.2.12-1+deb11u1_ppc64el.deb ab9018385fc2c610ea144959b2c3c494 6388 devel optional indent_2.2.12-1+deb11u1_ppc64el-buildd.buildinfo 023c3b7b91de390bb058aa99e65e42c5 129896 devel optional indent_2.2.12-1+deb11u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8YyVP0bbbFwKPsGN0jKBgzfto4IFAmaAeVwACgkQ0jKBgzft o4IlShAArRSMkd7bYBDpvG4QBYTPYlwxOLmJmpNrGAiFFRDfYAvvN2bsjfHMECce TwBSdPy6A7IqBMmIqJmQ7mrubjnDQR7jVCHG3MBKid2OUxflJnByyCVS6xutUPS6 uNdtzDmPwrpsBIFLqe32ApJs2AFtn7I1kt+3mywiuq+RXjzBZlcyRDX8Xa6nAbAY UhqJ4leYl+EsX3oBVZOLFXGuwMl1GKAiIohxvVAdsKNrAmz2VeDhKGlRMOLmrDHd Ayd2URw1vaLVZRG+DNk0Fefhgy/G2FjEoW0uPWQb6covP7p94PvoV/ZHKoh3yfRG LqsZ+51zOuoygI3GfcD7mH5jyrLtBktLkepWGqsA89zlpXRQmGy/LagrYBN84IFL NpONw3gFzoMNOghY+3kuyEkLvKtlkq1958airMaaaswTH3gWUZW+iHzVYTuUwSGU X8cgLJjw29r9YVbQX9xi3FW9q7e2zmixDLC8pd75ATyX/EjuuBvHmlA8eTARELH9 czHBA1W2fonWrWbF3OIE04lTIdoLrVBAw3tsVkBayMAU2WIIJRzLEpV8nCCR1GQH hSLQugA3jX7vwQsWuebe9a2eKhUKRJkuQ2f+5VTBO7HpZ/qUdMpzXebzt89kLRYl m+1UOQ0E0+pk2CdIgRRX5eFPmdK04BzE3d3NoWSU+fmwlA0ItoU= =N0VM -----END PGP SIGNATURE-----