This is an automated email from the git hooks/post-receive script. smcv pushed a commit to branch debian/master in repository ioquake3.
commit bafbfb0e12fbd73663f88c125eb012700613dcca Author: Simon McVittie <[email protected]> Date: Fri Aug 4 18:34:38 2017 +0100 New upstream snapshot - Fix read buffer overflow in MSG_ReadBits (CVE-2017-11721) (Closes: #870725) - Check buffer boundary exactly in MSG_WriteBits, instead of potentially failing with a few bytes still available --- debian/changelog | 7 ++++++- debian/rules | 4 ++-- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index 05b847e..c368463 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,6 +1,11 @@ -ioquake3 (1.36+u20170720+dfsg1-2) UNRELEASED; urgency=medium +ioquake3 (1.36+u20170803+dfsg1-1) UNRELEASED; urgency=medium * Exclude curl headers from orig tarball + * New upstream snapshot + - Fix read buffer overflow in MSG_ReadBits + (CVE-2017-11721) (Closes: #870725) + - Check buffer boundary exactly in MSG_WriteBits, instead of + potentially failing with a few bytes still available -- Simon McVittie <[email protected]> Fri, 04 Aug 2017 18:31:01 +0100 diff --git a/debian/rules b/debian/rules index 780cc23..2d6a9de 100755 --- a/debian/rules +++ b/debian/rules @@ -91,10 +91,10 @@ ORIG_SOURCE = ioquake3 ORIG_REPO ?= https://github.com/ioquake/ioq3 ORIG_REL = 1.36 # Empty if packaging a tagged release -ORIG_REV = 67dace6c209c91fac5861846364e62c1c67aab77 +ORIG_REV = 2955f8dadb0c521218b634eb98da41de9c429a51 # Use the date of the ORIG_REV, or 20130426.1 if you snapshot twice in a day, # or empty if ORIG_REV is -ORIG_DATE = 20170720 +ORIG_DATE = 20170803 ORIG_SUFFIX = +dfsg1 ifeq (${ORIG_REV},) -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/ioquake3.git _______________________________________________ Pkg-games-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-games-commits

