From d3224cea9b1bec0d011ec4c79d8619031f4be0a9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Frings-F=C3=BCrst?= Date: Sat, 22 Apr 2017 10:17:02 +0200 Subject: CVE-2017-6318 --- debian/changelog | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 299ba91..1781835 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,13 +1,11 @@ -sane-backends (1.0.25-4) UNRELEASED; urgency=medium +sane-backends (1.0.25-4) unstable; urgency=medium - * Remove outdated debian/libsane-dev.NEWS (Closes: #852842). - * debian/rules: - - Remove DVIPSSource from sane.ps to make build reproducible. - * debian/sane-uitls.postinst: - - Add "|| true" after adduser call to continue installation if - adduser fails (Closes: #860078). + * CVE-2017-6318: + - New debian/patches/0500-CVE-2017-6318.patch + + cherry-picked from upstream to fix memory corruption and + information leakage (Closes: #854804). - -- Jörg Frings-Fürst Fri, 27 Jan 2017 22:09:18 +0100 + -- Jörg Frings-Fürst Wed, 19 Apr 2017 12:07:38 +0200 sane-backends (1.0.25-3) unstable; urgency=medium -- cgit v1.2.3