-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jun 2024 18:25:00 +0200 Source: indent Binary: indent indent-dbgsym Architecture: s390x Version: 2.2.12-1+deb11u1 Distribution: bullseye Urgency: low Maintainer: s390x Build Daemon (zani) Changed-By: Santiago Vila Description: indent - C language source code formatting program Closes: 1036851 1049366 1061543 Changes: indent (2.2.12-1+deb11u1) bullseye; urgency=low . * Restore the ROUND_UP macro and adjust the initial buffer size. Patch from the author, backported from 2.2.13. Fix memory handling problem. Closes: #1036851. * Apply two patches by Petr Písař . - Fix an out-of-buffer read in search_brace()/lexi() on an condition without parentheses followed with an overlong comment. - Fix a heap buffer overwrite in search_brace(). Closes: #1049366. This one is CVE-2023-40305. * Fix a heap buffer underread in set_buf_break(). Closes: #1061543. Patch by Petr Písař . This is CVE-2024-0911. Checksums-Sha1: 98728df26bb6e864380571495ff1afe64ac87d00 84660 indent-dbgsym_2.2.12-1+deb11u1_s390x.deb 5bf9f85906e6b06d27a77e52566114e2dff4c781 6306 indent_2.2.12-1+deb11u1_s390x-buildd.buildinfo ab56af4eb177816851d437a6322b3183cf3b54de 126596 indent_2.2.12-1+deb11u1_s390x.deb Checksums-Sha256: 64e10192b26f2b01af5855dc18e1414114d4c8b36f0e50e4cab8bdb29f8165cd 84660 indent-dbgsym_2.2.12-1+deb11u1_s390x.deb 6ebd9f95b260dc130c9bc0a290a082d8826251924663918e1a3f1c682fca394f 6306 indent_2.2.12-1+deb11u1_s390x-buildd.buildinfo 3b2acbb99d4954236fe898f6d2d29d7a7367ca0b800d5c9f2017c67a6dc8e4d8 126596 indent_2.2.12-1+deb11u1_s390x.deb Files: d27bcd07abceb1926097ca570b6ebbf0 84660 debug optional indent-dbgsym_2.2.12-1+deb11u1_s390x.deb 9f1d591b26f82bd5ed516bc01e5367fa 6306 devel optional indent_2.2.12-1+deb11u1_s390x-buildd.buildinfo e54f94162abaadd2d701e5469d281742 126596 devel optional indent_2.2.12-1+deb11u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETdQgQHyJW2hcXsTC6b+AMjGgQHgFAmaAmIQACgkQ6b+AMjGg QHg5bhAAmbxhJcc/5Qay+CQHgOsVJ+jh4WhwdOrWSH/9Zg/Mzyyc+A9LlK/7Joo1 /1hmk9rXOy/0XlTVd+Xg+2LzEGEkSa7/WapH4VaaWsdmPoeXcIeUmNZU+dD55h1O I2Q9J7V9juHuEJrgVEMT4REdZ0zIKU8Ulzx2nf33YzwH2A4/27srz+9MchS4qQAO yGWryInM8u/E2+UD2ZTeT+vFHHgK039OFNiE1l+ZEbE/w/GmNRZN+DlNEA6ZK/9P DrTeUCKlaKAffYp6QaAMiPeDy/08xOmN2cpWsPBnmXMyAiQHrp558jmnBD8b2RsR DWCIZXsmovw2qBqKD/rfX/UU2ZW2wjPccm7YQxkLhJ277Oe/DjxAlsDev7UToxCt JXiD3JR1GrlG0eBmfELFeFKxXtigdMK2Cs/rF1KEPUDXvYDPFx4Wgg7o7TWTjqfZ FhG3UxyrGI4A6H/EJcEN26l+Pm5Cu/emn66P7VeAy1o2LBIn29zt+VyjUFspOgjQ 9XoHCIcfBSyQZ18HK0/LqkWWpr+swaLPnxgiIlVl4SpjGtem2hK/G4iEiD8AB2pi LXp5y1Hy9DnpeJ5/1tLcFvyZPdAWNu8umP3aLu5FvC+ZGRUq3TsFk4tZheDDR7Lw q0QaC12pgMyqX8kREKr1dMlvzgRtixXhJGS+PcbKhqE0iSKlczc= =q9HG -----END PGP SIGNATURE-----