Accepted file-roller 3.36.2-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 27 Apr 2020 19:39:17 -0400
Source: file-roller
Architecture: source
Version: 3.36.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Jeremy Bicha <jbicha@debian.org>
Closes: 956638
Changes:
file-roller (3.36.2-1) unstable; urgency=medium
.
* New upstream release
- SECURITY UPDATE: do not follow external links when extracting files
+ CVE-2020-11736
+ Closes: #956638
* Bump debhelper-compat to 13
Checksums-Sha1:
0c337b9950f97f0fd7817ad504b8062cb17ab5af 2190 file-roller_3.36.2-1.dsc
c18a7162e38a0db11c5703cb8e253da20b64ad0b 865852 file-roller_3.36.2.orig.tar.xz
cdb13ef3c0c328fe20989a5b3811023e5a2d4acf 13552 file-roller_3.36.2-1.debian.tar.xz
6a315fd3b8144b727f72d519130ad8b87943bd97 18182 file-roller_3.36.2-1_source.buildinfo
Checksums-Sha256:
8a416da672401c75958019bf0924f10817400dd22b6edfb741516687612698bd 2190 file-roller_3.36.2-1.dsc
268f7fdad8d2a78dfed5e82eb8710bad389c311b720666d6f07a04ed51056bd2 865852 file-roller_3.36.2.orig.tar.xz
02516bc2cd073ba2a7a2eddd1f33a67b4026699e4c0005afd5b7db55a6689862 13552 file-roller_3.36.2-1.debian.tar.xz
762e71673051fac8740c187c58031e08e08a580b4b7035df1a134e6279212810 18182 file-roller_3.36.2-1_source.buildinfo
Files:
15b4e4b420d317c7c067c848ed6f97b2 2190 gnome optional file-roller_3.36.2-1.dsc
caa0103ab34d237a9760fbf5e1c72bc1 865852 gnome optional file-roller_3.36.2.orig.tar.xz
9af2233a30c98134c6b416947a6c91fe 13552 gnome optional file-roller_3.36.2-1.debian.tar.xz
c1604941ad82ce194c753986da7cafc5 18182 gnome optional file-roller_3.36.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=m7LT
-----END PGP SIGNATURE-----