Accepted virglrenderer 0.7.0-2+deb10u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 07 Dec 2022 17:13:46 +0100
Source: virglrenderer
Architecture: source
Version: 0.7.0-2+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Gert Wollny <gewo@debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 946942 949954 1009073
Changes:
virglrenderer (0.7.0-2+deb10u1) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS Security Team.
* Cherry-picking upstream fixes for:
- CVE-2019-18388, CVE-2019-18390
- CVE-2019-18389, CVE-2019-18391 (Closes: #946942)
- CVE-2020-8002, CVE-2020-8003 (Closes: #949954)
- CVE-2022-0135 (Closes: #1009073)
- Cherry-pick commit that avoid crash if illegal resource
is provided. (Upstream issue #143)
* Update test suite with changes needed by the CVE patches.
* Add test_fuzzer_formats targeting above CVEs.
* Enable test suite in d/rules, but ignore result (as the test
needs to use OpenGL, this might not be available on the buildds.)
Checksums-Sha1:
e3a91d9ceb9a8cbfc687eb30223a7c33a74e4e60 2081 virglrenderer_0.7.0-2+deb10u1.dsc
31d4545facb7e884aca929408632749b65a99416 590102 virglrenderer_0.7.0.orig.tar.bz2
f91a229f1dff1b9534c819a705e6cf89355a6949 13444 virglrenderer_0.7.0-2+deb10u1.debian.tar.xz
e6136c61a0ea19b6c481db73beb655b1add28c7a 9525 virglrenderer_0.7.0-2+deb10u1_amd64.buildinfo
Checksums-Sha256:
ad31ad9f68f38d32e22beafa5b6c5acf482ae9107685fd7f5b9ad9b69933d5d2 2081 virglrenderer_0.7.0-2+deb10u1.dsc
15ec0290ca0a2d175d6e5dc695938640c53d2c020e0c0f8a781045d3c27b2a10 590102 virglrenderer_0.7.0.orig.tar.bz2
3daf2f2776213748f2f61cf3d172db607440b738721e322eb5d75d87a1e770d5 13444 virglrenderer_0.7.0-2+deb10u1.debian.tar.xz
0745855e7cd2f22ef6babba4498830ce2fde584bfc020bd4e285ec77ec35677c 9525 virglrenderer_0.7.0-2+deb10u1_amd64.buildinfo
Files:
c5a02d756c3d152ffd1ec845062df620 2081 libs optional virglrenderer_0.7.0-2+deb10u1.dsc
f46ff65025c869c0ae86ba337cc699c2 590102 libs optional virglrenderer_0.7.0.orig.tar.bz2
5b290142711b3ab1440e96544d198c0e 13444 libs optional virglrenderer_0.7.0-2+deb10u1.debian.tar.xz
79a14d6d0e1b9f195b30b09993e93154 9525 libs optional virglrenderer_0.7.0-2+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=1tPC
-----END PGP SIGNATURE-----
Reply to: