-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Jul 2021 19:03:02 +0200 Source: aspell Binary: aspell aspell-dbgsym libaspell-dev libaspell15 libaspell15-dbgsym libpspell-dev Architecture: mipsel Version: 0.60.7~20110707-6+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-aql-03) Changed-By: Thorsten Alteholz Description: aspell - GNU Aspell spell-checker libaspell-dev - Development files for applications with GNU Aspell support libaspell15 - GNU Aspell spell-checker runtime library libpspell-dev - Development files for applications with pspell support Closes: 991307 Changes: aspell (0.60.7~20110707-6+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-17544 It was discovered that Aspell incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could potentially access sensitive information. . [ Agustin Martin Domingo ] * CVE-2019-25051 (Closes: #991307) objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow Checksums-Sha1: 8db5f5935a27c4d32a83bc815979c1aa596ef155 545276 aspell-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb d15ed515c692b43d9101937c988aa7fa164bf24f 7379 aspell_0.60.7~20110707-6+deb10u1_mipsel-buildd.buildinfo b235e1f3e3707782c7d9103e137bd222a0e1dbd1 221648 aspell_0.60.7~20110707-6+deb10u1_mipsel.deb 7e7561e2a0b460e05d834cc4d8d44cf114869fa3 32860 libaspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb bcd2dac74dff58da56fb250a6ace1647f86993d8 2710824 libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb 0be47667f9352be5720bc27595d3ed57b7e23545 274744 libaspell15_0.60.7~20110707-6+deb10u1_mipsel.deb 369e65e592c69eb308fea451cce1879946990a50 29940 libpspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb Checksums-Sha256: c684d1c5f7d5b0c22c1fcb399931c74a06bdfe71958b8b46ff7817dcf6c3bc69 545276 aspell-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb af8d4222162f7f1b0647e9cd50f7db05495e652048447b7c4123843b384eace0 7379 aspell_0.60.7~20110707-6+deb10u1_mipsel-buildd.buildinfo ea507bc8236d2975fbf877e39e4759a908435e21f11413ccf113917930a93078 221648 aspell_0.60.7~20110707-6+deb10u1_mipsel.deb 47efebe7ea70f77f1c8d98d02c7af96b218223037cb5a78cecd73b179f5ff49a 32860 libaspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb f48de588311e106c1a76a82bd521b93f878adb4a40277f401ed7e56ba6ac95c6 2710824 libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb fb1d1d9ac0f20a2242e6b0af30b2fdad1100fde2ed4bbc24f070cd77108d42b3 274744 libaspell15_0.60.7~20110707-6+deb10u1_mipsel.deb 79d6b3a8b3c9021507244faf483493e44626ef299a47e926a1c708535a450172 29940 libpspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb Files: 881d29f1f32b646beba6b14831c6c4f5 545276 debug optional aspell-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb 3da7ca0576fd545e3bd5e16b9bba08bc 7379 text optional aspell_0.60.7~20110707-6+deb10u1_mipsel-buildd.buildinfo 125c20f817de4d6ee0d4aff47883a19f 221648 text optional aspell_0.60.7~20110707-6+deb10u1_mipsel.deb 8a4c226a7947b0828a68067f83d2b730 32860 libdevel optional libaspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb c2f14122cf9d81a7aa7ac546d26a6af3 2710824 debug optional libaspell15-dbgsym_0.60.7~20110707-6+deb10u1_mipsel.deb 7aa397589be2f699b5e54f42a071e38d 274744 libs optional libaspell15_0.60.7~20110707-6+deb10u1_mipsel.deb b8fe38b219b4fca37af1b4e0539c2c1b 29940 libdevel optional libpspell-dev_0.60.7~20110707-6+deb10u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6YhmUaQdOAULQQfkuEloAOY175IFAmEEjGIACgkQuEloAOY1 75KGKQ//ZoXmrazpKZE0fk437j9FZn+5XhQueRCxIzglOOQUH9sXg0WSehoJmi3z qq9GAgdTXQK/cbVrIQDXjqpACTf+KLBrWm0tC9/VJa6KVY/e2+OqJv99UKUsLdnH 97LLXc9lSuk3PvUdPL5q7usBdySdeV5fzIjcsaHbTueH4qHyWUk3PuYkbqG004Zk +retmVgu9ea3LdRAHOjdRp78eWQF8EfCdZM+EG2WxhOCFQEr1TGTe0L82Ivk3dTL UJUpwCPeafoc8CVhLgDLDfU1q/CZ5QP/j0t1hI+Y9O4MVgJ7SzzT6s0OOk1JbIIj ixnRx/iAe7RI5E7JtieFtBy9av99T3m+7ZdSJQU6zBBoAxUYVxi5ViWQWmAwT8ia OlYj48vTUqkTLqD6tTDPrM39xF6mrcM1BM7oEuuThAE7AuFenZgvrwo+WGaEnppe PRf5ZUtazrUoSqegaJfVmr2RZp2F91MybRD/adwRCU6tZTIp7uM5XZgBiM+wQX+/ +pgUI9jJfbfzAPTR3a4PeCA+tYTBsAnqdyGluJm3jZh9G01JqdNO7Ab1zcYce51b FbWn46UBxcpAn90zITs3e7UftxkXEWiOXtxdxbK7P2kW/OHJYSvwZRT4MxkEAhy3 SfVgQHMjNR6lzKCkSH6x4eWkhwPpGQ/O5G/qmw0fB3w7YFzoJF4= =Yf51 -----END PGP SIGNATURE-----