Accepted libtpms 0.9.2-3.1~deb12u1 (source) into testing-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 10 Mar 2023 22:02:22 +0100
Source: libtpms
Architecture: source
Version: 0.9.2-3.1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Seunghun Han <kkamagui@gmail.com>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1032420
Changes:
libtpms (0.9.2-3.1~deb12u1) bookworm-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Rebuild for bookworm-security
.
libtpms (0.9.2-3.1) unstable; urgency=medium
.
* Non-maintainer upload.
* tpm2: Check size of buffer before accessing it (CVE-2023-1017,
CVE-2023-1018) (Closes: #1032420)
Checksums-Sha1:
e40cc354e9c37d360420e1077492d43b444854aa 2123 libtpms_0.9.2-3.1~deb12u1.dsc
41e9ba916748672a66c38b6e27ac659ccfd60ca3 1263088 libtpms_0.9.2.orig.tar.gz
d462a49b30b825ef6793f869aa7d6f7e3cadbdf3 10332 libtpms_0.9.2-3.1~deb12u1.debian.tar.xz
ee366e749ed11137cb763ee1cf9ea8e7aaf0ebae 7077 libtpms_0.9.2-3.1~deb12u1_source.buildinfo
Checksums-Sha256:
a7e8428ca3df1770bd4cca80c5b10ba0bcbf366a27714813039c1087f07a3c1a 2123 libtpms_0.9.2-3.1~deb12u1.dsc
460047f880c5a17dfb8f5c92668fd2f0c508279d4cc3de0a779c21a09f966766 1263088 libtpms_0.9.2.orig.tar.gz
edbb73604dc6a9a7392cb925896ded0653f374bfdf32b351027a304dc39855ca 10332 libtpms_0.9.2-3.1~deb12u1.debian.tar.xz
eb6f99316fcb3ae8060a40f1c1217215180543c2ce71b0243b9bc11c27c91b4a 7077 libtpms_0.9.2-3.1~deb12u1_source.buildinfo
Files:
6ee2117d1b5f1f7c15d6a76099e80112 2123 libs optional libtpms_0.9.2-3.1~deb12u1.dsc
ebfa4f07bc220df4fe19b1f04cfdfc91 1263088 libs optional libtpms_0.9.2.orig.tar.gz
fa9d48ea027bf59802135836e9a1b68a 10332 libs optional libtpms_0.9.2-3.1~deb12u1.debian.tar.xz
dc270d46e9d6708afdb9f7acb8fd3320 7077 libs optional libtpms_0.9.2-3.1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=aTDt
-----END PGP SIGNATURE-----
Reply to: