Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Jul 2026 12:18:27 +0200 Source: fluidsynth Architecture: source Version: 2.5.6+dfsg-1 Distribution: unstable Urgency: high Maintainer: Debian Multimedia Maintainers <[email protected]> Changed-By: Fabian Greffrath <[email protected]> Changes: fluidsynth (2.5.6+dfsg-1) unstable; urgency=high . * New upstream version 2.5.6+dfsg + Fix CVE-2026-58264 - a heap-based buffer overrun in command handler + Fix CVE-2026-61714 - a heap-based buffer overflow in MIDI player + Fix CVE-2026-61721 - a heap-based buffer overrun for DLS samples + Fix CVE-2026-61723 - a DLS ptbl chunk integer overflow + Fix CVE-2026-61722 - a DLS articulation chunk integer overflow + Fix CVE-2026-61720 - a SF2 DMOD chunk integer underflow * High urgency because of the security fixes Checksums-Sha1: 15b9eccedabaf1808dffd7112e9ed81b1dce3fb8 2600 fluidsynth_2.5.6+dfsg-1.dsc 997dddf0338c7e1eafe98c586f93df2ed620a428 1473556 fluidsynth_2.5.6+dfsg.orig.tar.xz 7e112c7e262bc1d21bef25663cbba0e125030b9f 21164 fluidsynth_2.5.6+dfsg-1.debian.tar.xz 2660b27e586ca2293bd549c9006101776032b70b 14143 fluidsynth_2.5.6+dfsg-1_amd64.buildinfo Checksums-Sha256: e5997e6b043257477dcca7692198a7d8e71a7be528bc8a9e405fa50fb536b3a9 2600 fluidsynth_2.5.6+dfsg-1.dsc d9d74d48b61062889696cb77d57e53e223acca2d951efcb94f0b8e62b689a6ee 1473556 fluidsynth_2.5.6+dfsg.orig.tar.xz c144c9cb3f299684015b8b5f59c6f71daef5e9a5e5edfd9f8ad0662cb6133450 21164 fluidsynth_2.5.6+dfsg-1.debian.tar.xz bc8b87ec916f332e6cea70ee4bb7989eb36e624240faf07d35ef0d333c4616cd 14143 fluidsynth_2.5.6+dfsg-1_amd64.buildinfo Files: 8d4f2fe33b28f256d39cb9cf5cf9c3e1 2600 sound optional fluidsynth_2.5.6+dfsg-1.dsc 9623af8e4b1ff86cb860cfb8740150d3 1473556 sound optional fluidsynth_2.5.6+dfsg.orig.tar.xz 15d9ee20f9a0e1a7c4fe7fbf472a084d 21164 sound optional fluidsynth_2.5.6+dfsg-1.debian.tar.xz 774d9eaec3b9c35020da8b077d046ad2 14143 sound optional fluidsynth_2.5.6+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEIsF2SKlSa4TfGRyWy+qOlwzNWd8FAmph61YSHGZhYmlhbkBk ZWJpYW4ub3JnAAoJEMvqjpcMzVnfQ54QAKuwQEMDpUiO6adMS/MgbKtmzqnfzKeR n7KRt0RsRuGW/ibtV8lqZT2c4ioNLiJrVNUau3BDIO8k7N06xqPMzM3FQwwwyxnG ryo7fumixGk/r03zOSFVr/owSM3ksQ5PyC310Vp5Y22Vf2fCDS6SX2zDq6Yey2WH VpCGRxfgNKlL5TbGmndA9jEeijSrBziCEpDv3BprkfPEF9EIcV7oyTMdxHoi1XuA S/TOd2+PmFuPhzVg/icE9kSR4St9VsILespKFlR63pUlj1sQolOBYDlh+MX7pFrc lP9SGTRSu9b6+BcrYuznfg65IzcDZqjVXUIwY9Uwm8b4ga+Yg9wAPrIuj/qk8RJ7 Qjk2D277unFGI7bRaXoQ0wLagmO9CPyaCdzRVdcProhttt6G9A52/PDf/OEnwr4S XhHwmUZjm4tnM/oAA11xNGEp8Ld6BbOqVIQ2KOWR4ihWZClE/paiunjlz3iey3c7 IOn7PM0INR2VA52ZBMtdjgNOuCwZoiLCAT5bfX6ya06XiEcyK9aIDcMsWhdB0Plb TKj6l7r5FRaSmGkjvW5tIEFeh1H/7R4wAICOOMVctvTVZwGOKzAdQBMaFhg1XCKt NyQzSjnIxWogPbE55wYVYYcuf+XbbkrXhQpgiVELwtMgzbzfBqAAYxEF7zUoxHql LULnM2vXuPaT =Cb0b -----END PGP SIGNATURE-----
pgpJhgEOxUf_a.pgp
Description: PGP signature
