-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jun 2024 18:25:00 +0200 Source: indent Binary: indent indent-dbgsym Architecture: armel Version: 2.2.12-1+deb11u1 Distribution: bullseye Urgency: low Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Santiago Vila Description: indent - C language source code formatting program Closes: 1036851 1049366 1061543 Changes: indent (2.2.12-1+deb11u1) bullseye; urgency=low . * Restore the ROUND_UP macro and adjust the initial buffer size. Patch from the author, backported from 2.2.13. Fix memory handling problem. Closes: #1036851. * Apply two patches by Petr Písař . - Fix an out-of-buffer read in search_brace()/lexi() on an condition without parentheses followed with an overlong comment. - Fix a heap buffer overwrite in search_brace(). Closes: #1049366. This one is CVE-2023-40305. * Fix a heap buffer underread in set_buf_break(). Closes: #1061543. Patch by Petr Písař . This is CVE-2024-0911. Checksums-Sha1: cbe0cf04f83b1937dbad34fb96430d7ccf60a0c7 80156 indent-dbgsym_2.2.12-1+deb11u1_armel.deb ce4b9303c6a415c91780e5f71c194b0d187d2386 6269 indent_2.2.12-1+deb11u1_armel-buildd.buildinfo b59dcf0871b9a09ee4e5b2983610daf233a2613a 124080 indent_2.2.12-1+deb11u1_armel.deb Checksums-Sha256: 32aa78ee32336d9c69dfbd7b1bc3625fcce1a77c38decaea89f739e13fdf0221 80156 indent-dbgsym_2.2.12-1+deb11u1_armel.deb 78a86c281389cb3ef0f991a53784b25a33b205bac6610879b47fcedc9be96b22 6269 indent_2.2.12-1+deb11u1_armel-buildd.buildinfo 723950eb9fe851220887c82e5aff53688437cee7da2a1ac42561c72f3097574f 124080 indent_2.2.12-1+deb11u1_armel.deb Files: 4bd5436d5f4e89f820c53bfd8c6566c9 80156 debug optional indent-dbgsym_2.2.12-1+deb11u1_armel.deb 96b91b2675256895f64574794987ff39 6269 devel optional indent_2.2.12-1+deb11u1_armel-buildd.buildinfo ead1597c8789bab2dc3d74b9263525a7 124080 devel optional indent_2.2.12-1+deb11u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELfAsbDZr65zRgOsKct6XE2dptMYFAmaAeX8ACgkQct6XE2dp tMbcUg/+Jd1A1CFyp/P94fZ/Ge0LYxLH1EjUjb0EPDJXX78Y1XfxvNY70MAwOEPs IA5ZB7SlVIKl0Qdk9vZ++nXTZe9eIsygJxS9Hom4cK/toILHsO/GU69IIWl0Wd73 ztU3N9ShYYzDKPJhU4KTKiNtujvxbo25x7YQ8QdpH0XtmyUVE3zE8JvZ1dBcsTlZ ArVxxSJMgfUJ4VbJ1xESle+ASpF3PGmJX9dFQD+Xanrhkr0llJFF+fZxJ2wPLeLU Kj5/Qz8t9f4gK66WHpDmPvQBEou22g+jaklLA8dxEuBfWQHJ6Jui8yczMdcXodRl xSZqM+d//xxP+8yhn/v5+ReDb4AR/nFA3nVrlGOcqQaSpyY1NcZVcOPuR7fYCe5r 6VqcCXjy6PgbiT0cQtwDRwXS+HqNPl6Wp9nAx1v6emCblviVA/aT8UihyEwpTKTm pVpMsLl7WVf2CL72y9jjlZ/dNAGST0+5fQp+yyJ7PybJ/Htj34Wb2UUHKNvQPznG 4nUfRhIzRTYM0ccHKrei9PyJF0Akbn9BJxH3msenqZdcZ7hAIbvzuvjD15ze0Jah /YSxcnrotrW0XHNCUhit6dgnyuFXE6gKsQz9AEo9Eg6Uc8tw2XaPFAGTNDgg9gQJ /poE0O1KJFQmbT4QnlhbLHUlJwVvZ8Gg568RiU1nmO/8soO/w6o= =Te+2 -----END PGP SIGNATURE-----