• Accepted libconfuse 3.3-2+deb11u1 (source) into proposed-updates

    From Debian FTP Masters@21:1/5 to All on Fri Oct 14 13:20:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Tue, 04 Oct 2022 00:14:59 +0200
    Source: libconfuse
    Architecture: source
    Version: 3.3-2+deb11u1
    Distribution: bullseye
    Urgency: medium
    Maintainer: Aurelien Jarno <aurel32@debian.org>
    Changed-By: Aurelien Jarno <aurel32@debian.org>
    Closes: 1019596
    Changes:
    libconfuse (3.3-2+deb11u1) bullseye; urgency=medium
    .
    * Add debian/patches/CVE-2022-40320.patch from upstream to fix a heap-based
    buffer over-read in cfg_tilde_expand (CVE-2022-40320). Closes: #1019596. Checksums-Sha1:
    627a10fb71daedb1cc75af6126507e45489bfc25 2093 libconfuse_3.3-2+deb11u1.dsc
    176e4a48e8cddbb3a169d7fb75fb7a21a6998e3f 7580 libconfuse_3.3-2+deb11u1.debian.tar.xz
    18570118a6cbf2835f606af78b04eff883ec7271 5723 libconfuse_3.3-2+deb11u1_source.buildinfo
    Checksums-Sha256:
    5fd6337ea24f7b405f69d0bfe07a08f3a459d921f9a70b3936bb74ec735f1ef2 2093 libconfuse_3.3-2+deb11u1.dsc
    2029b5ed8c8d1888d63b4b4445249ceeb5f687af006d3a2ba32259d8225810ea 7580 libconfuse_3.3-2+deb11u1.debian.tar.xz
    eaca798b673f9bf5088bfe89c04ad61a127059ccc3c7a85f4c9048bae56b679f 5723 libconfuse_3.3-2+deb11u1_source.buildinfo
    Files:
    020fb2b834459318ea07ada5947cbfe8 2093 libs optional libconfuse_3.3-2+deb11u1.dsc
    c186ed801ab7d62cb21f056a3abc8c3f 7580 libs optional libconfuse_3.3-2+deb11u1.debian.tar.xz
    7ad17b0daedfe69fa23fc43718aa3bcf 5723 libs optional libconfuse_3.3-2+deb11u1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEUryGlb40+QrX1Ay4E4jA+JnoM2sFAmM7Xx8ACgkQE4jA+Jno M2sL5w/+OasB7OndLP4dj2bd7eRoVJUwb+AuXIu/wkjyVteRMBLCy1Weoi0OxUnW kie/Bg8x9uPnvmLhTiadKpAqhvliwo3SWCP+Eb9buJc8owFAha27PisGkTv6LOSm /s8ab9hht9tmQCWMCtxPyt0BFzMpWP+PqQSbrY9G6+x3fAgUU4UN0XpojSOoRP8O 4OZVJdufVJ8DUiXZt5UPgJuJqqr1OYq1+a7JKI390qLY5JJmW5+uk8li5ZsFswcG a4YyajZCU8aO267VQutGJ8ZRGbKyyUk1pjXkcir4oPWs2W8J+na6dRyn3MHfpbiz F7dC15++OZydY1R11iCqKqTOCNIUXkJLTtHGxvoVvv1zsMog4Fc+zU+ZN/c1HvdS KAbTscnND+Ycz4OHeesRKt8KT9hbSMLRnqKSncs5eIYQdJKIpUBw1jfndTRn9cln H0f40iZjHiE0Fvqa/K/UtE64f3OJ3jBMUiuCJ0n5Aj2NNszFduaN1n2jOWNu5jZt h0PzEvS5G1akAdPd3NMQdnKzUFAkYUM6V0zABvvyQZGJLcpoByvTamMySbLo2UGX NIBKHd2LwkmzFfTgRmJNa51xkf8h1ZQT+TLGRJ8S5y6YQf0vzN5d1P/WIFmljTuV QxuzMr0xmqsownAB1qxU9Dv7Um9tgYyejTIGrd6LqHtdTrGaiSI=
    =TvCp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)