Accepted dpkg 1.15.12 (source i386 all) into squeeze-lts
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 01 May 2015 22:22:35 +0200
Source: dpkg
Binary: libdpkg-dev dpkg dpkg-dev libdpkg-perl dselect
Architecture: source i386 all
Version: 1.15.12
Distribution: squeeze-lts
Urgency: high
Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
dpkg - Debian package management system
dpkg-dev - Debian package development tools
dselect - Debian package management front-end
libdpkg-dev - Debian package management static library
libdpkg-perl - Dpkg perl modules
Closes: 617923 695919
Changes:
dpkg (1.15.12) squeeze-lts; urgency=high
.
[ Ben Hutchings ]
* Search and backport required security patches.
.
[ Raphaël Hertzog ]
* Improve parser in Dpkg::Control::Hash to not require an empty line
before the PGP signature. Closes: #617923
Thanks to Roger Leigh for the initial patch.
* Drop myself from Uploaders.
.
[ Guillem Jover ]
* Fix OpenPGP armored signature parsing, to be resilient against doctored
input, including source package control files. Closes: #695919
* Make sure the OpenGPG armor contains a signature block, even on EOF.
* Do not accept Armor Header Lines inside a paragraph.
* Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
only accept [\r\t ] as trailing whitespace, although RFC4880 does not
clarify what whitespace really maps to, we should really match the GnuPG
implementation anyway, as that's what we use to verify the signatures.
Reported by Jann Horn <jann@thejh.net>. Fixes CVE-2015-0840.
Checksums-Sha1:
80bd1e23f6d374db591169a92c186db866e4b7b1 1780 dpkg_1.15.12.dsc
f453c6d74e559253599d8a92b40015788a8ffb4f 5253946 dpkg_1.15.12.tar.bz2
7c40d09600238efe88e76fbbf918c799cc3d7bad 428642 libdpkg-dev_1.15.12_i386.deb
dd12d9278f81a3307a3064b23e8a1593af3269a3 2340918 dpkg_1.15.12_i386.deb
4004c017a6ace8d3597afdd1d866c9c3183b0701 903246 dselect_1.15.12_i386.deb
76ab6ab17ae24250d6679c7cbf7afb02300d4457 816864 dpkg-dev_1.15.12_all.deb
b02134fc11988ebd42af58b8030b050381e8dcf7 699052 libdpkg-perl_1.15.12_all.deb
Checksums-Sha256:
969d1fbf856942efa05d2f648ab1cb69de0b0078acd4804d69e37b3a19c37c69 1780 dpkg_1.15.12.dsc
b877f06bcdc2c2054ee0aa1e857e641ece92f3f9f3ef286dfb4f59f077c6a4b7 5253946 dpkg_1.15.12.tar.bz2
04e04182ab194390d97625ae1ab2eb350cdccdf641272a55b8044384dd910ef7 428642 libdpkg-dev_1.15.12_i386.deb
2cf11c62ef9cf22887d4b33504d53e69dae419852317fb75566ffec0a0c59854 2340918 dpkg_1.15.12_i386.deb
33449d92224ee6ff8709e34d367ac7713c6da302b5d7472d46bc149d2239f6b9 903246 dselect_1.15.12_i386.deb
a66a3a5ee30a8878a9da5ee41eae3608f4b6b2b4a64bae29c1676f7cac927ad5 816864 dpkg-dev_1.15.12_all.deb
6e91a3ea48bc452941e1ce2b34bfaf86f89c34e95edf5a3a0bc0f4a0e63eedae 699052 libdpkg-perl_1.15.12_all.deb
Files:
b3d0f90e706c1dfb8f0cbb499fe4d4a4 1780 admin required dpkg_1.15.12.dsc
9baaf06479132b667cbff3f323cf5ec8 5253946 admin required dpkg_1.15.12.tar.bz2
3b02d3e8f360ec73333eef3ec0e7e6cc 428642 libdevel optional libdpkg-dev_1.15.12_i386.deb
6d9d3b174e43a54d9b94fd3b7e572901 2340918 admin required dpkg_1.15.12_i386.deb
9da6863f744ea2ad644d4c3ece141eb1 903246 admin optional dselect_1.15.12_i386.deb
7166f8a9df5b9bc9c17bcc050c604628 816864 utils optional dpkg-dev_1.15.12_all.deb
a65d579ef5e43f1902b76a86ad43574d 699052 perl optional libdpkg-perl_1.15.12_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=LtMH
-----END PGP SIGNATURE-----