From: Simon McVittie Date: Tue, 11 Aug 2026 09:25:43 +0000 (+0100) Subject: Mention #1144105, #1144106 in previous changelog entry X-Git-Tag: archive/raspbian/2026.4-1+rpi1^2~10 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=4a7bf68c506d4eb68f03910523302432fc36b372;p=ostree.git Mention #1144105, #1144106 in previous changelog entry --- diff --git a/debian/changelog b/debian/changelog index 9da10a63..cd0cbd02 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,12 +1,18 @@ +ostree (2026.3-2) UNRELEASED; urgency=medium + + * Mention #1144105, #1144106 in previous changelog entry + + -- Simon McVittie Tue, 11 Aug 2026 10:25:22 +0100 + ostree (2026.3-1) unstable; urgency=medium * New upstream release - Prevent heap buffer overflow on 32-bit systems if downloading from an attacker-controlled OSTree repository - (GHSA-xppc-j946-vcj7, RHEL-189207, no known CVE) + (GHSA-xppc-j946-vcj7, RHEL-189207, no known CVE; Closes: #1144106) - Set memory limits for LZMA decoding to prevent resource exhaustion if downloading from an attacker-controlled OSTree repository - (GHSA-7cgc-gp99-6jmm, RHEL-189208, no known CVE) + (GHSA-7cgc-gp99-6jmm, RHEL-189208, no known CVE; Closes: #1144105) * d/libostree-1-1.symbols: Update -- Simon McVittie Mon, 10 Aug 2026 11:20:12 +0100