-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 28 Mar 2025 22:51:19 +0100 Source: fig2dev Architecture: source Version: 1:3.2.8b-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Roland Rosenfeld Changed-By: Roland Rosenfeld Changes: fig2dev (1:3.2.8b-3+deb12u1) bookworm; urgency=medium . * 38_CVE-2025-31162: Reject huge pattern lengths. * 39_CVE-2025-31163: Reject arcs with co-incident points. * 40_CVE-2025-31164: Allow an arc-box with zero radius. Checksums-Sha1: b8c6ce59da0f4d6e28c85a52a0e3bf7e948f07b7 2295 fig2dev_3.2.8b-3+deb12u1.dsc 9a85b37a0770d73915584f1e75e58375b093d9bd 522756 fig2dev_3.2.8b.orig.tar.xz 99cdc4c5009aca7f06fc3db30b693914c9ed7331 25800 fig2dev_3.2.8b-3+deb12u1.debian.tar.xz f67978c975b6edb2ba5da2fdb141e9d07225bdbc 9900 fig2dev_3.2.8b-3+deb12u1_source.buildinfo Checksums-Sha256: 9c9be66d78cd39b2e2051a7e1b414e58242eec5f313c19c9a867433cd9ec6af0 2295 fig2dev_3.2.8b-3+deb12u1.dsc 418a164aa9fad72d25bb4fec8d7b452fe3a2f12f990cf22e05c0eb16cecb68cb 522756 fig2dev_3.2.8b.orig.tar.xz fa23309ce97d8954f6f58a4d0fa2a201db2489ef5d5f35addec12ba9e5e28c53 25800 fig2dev_3.2.8b-3+deb12u1.debian.tar.xz 63e32a53c07d0c545b4ab77ac4f28fd2db8a106ff3a2bfa6eb45e01f7ce1d434 9900 fig2dev_3.2.8b-3+deb12u1_source.buildinfo Files: 8a7d429a245bc02f0a303938845447d2 2295 graphics optional fig2dev_3.2.8b-3+deb12u1.dsc a4c3a99fbbd8b61363eee6304d79ca7e 522756 graphics optional fig2dev_3.2.8b.orig.tar.xz 63e01a98c63a871efd1f821eac217ce1 25800 graphics optional fig2dev_3.2.8b-3+deb12u1.debian.tar.xz 366c6a34ae4c151e5662d7c4d76f57d3 9900 graphics optional fig2dev_3.2.8b-3+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErC+9sQSUPYpEoCEdAnE7z8pUELIFAmfnKWsACgkQAnE7z8pU ELJolg/+NyNhaQPybjRIOFjoAoxM8Mm0TFJaqopeE5hHav9hPuX412YXy6Dsc8D8 Ji8M1VhJ09DAjL51LVengEVQuImerOykqyISCacLOwrv3zwGenWVboY5UA6UYgGc 69c1UOkMconj+QNuSHr1UHRBKKF6BQY26/45nlBeORhoXCsp5rtQwWWBIEtopWLJ oyE1rw0HibYxOcYiAu0nnS3txquZrpdnBSiYw16wth/3HnnEwDxHC08u9uc7r4Wf fspnp+Y9/LCPXZzCy352e8af5FAqXSxqZDyHqPHwgvTMxKdzylKEt4X23SouFtCW TIh7eGH60nmxWvU/9iE5qf1QmYVbXn01uFqDmtWfZlYfgcLV8kIRD/Im42s/ytmP UW0GivGIVsq776oexrOU6EsrbIC6m8F/FFiwYpSk6qMnX6uyWo6kfAPbB13qC4Uc SEsRNVW131vPo6PuUEkKv00g8GblDWnYgktDC588uNSs5T5W7htC3XGoPbO8vwan bJ6TpiFXOYAZ4Ao3q5gDebLzHqx97LHkdi2G/PsgJP35PRTT5639RmNKXdPi34op LLRln8pOoOFnX7cVKLXYjZwLIGe+KN1/zCFvo/XYCz3AvCdAZsQEyXz/Y/4P2ecn NyGD5o5gs8pF3ofH7MgeNXjfrU6Ma56pektf4f2saK2te+Ad/pM= =LO8s -----END PGP SIGNATURE-----