Accepted gcab 0.7-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 20 Jan 2018 09:10:05 +0100
Source: gcab
Binary: gcab libgcab-1.0-0 libgcab-dev libgcab-doc gir1.2-libgcab-1.0
Architecture: source
Version: 0.7-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Stephen Kitt <skitt@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
gcab - Microsoft Cabinet file manipulation tool
gir1.2-libgcab-1.0 - Microsoft Cabinet file manipulation library - gir bindings
libgcab-1.0-0 - Microsoft Cabinet file manipulation library
libgcab-dev - Microsoft Cabinet file manipulation library - development files
libgcab-doc - Microsoft Cabinet file manipulation library - documentation
Closes: 887776
Changes:
gcab (0.7-2+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Do not crash when ncbytes is larger than the buffer size (CVE-2018-5345)
(Closes: #887776)
Checksums-Sha1:
dd5beb91385674116346a3d5d4dd6f90235e76e6 2342 gcab_0.7-2+deb9u1.dsc
1fca43f2a8120060f5d12ac08c278b6e9f57986b 332248 gcab_0.7.orig.tar.xz
95056766d802bb6d4033b9065123daa5779db5a0 6848 gcab_0.7-2+deb9u1.debian.tar.xz
5975d2919a875a4540cba77d74ebff9536cf59ac 5967 gcab_0.7-2+deb9u1_source.buildinfo
Checksums-Sha256:
ab1fc4ea31192243244fa201293cfbfc89690a2d9b237c6daf76635f753bde9d 2342 gcab_0.7-2+deb9u1.dsc
a16e5ef88f1c547c6c8c05962f684ec127e078d302549f3dfd2291e167d4adef 332248 gcab_0.7.orig.tar.xz
16580432f75ad5bba792adb6f7c02fd496a50efc7a95bb7efc691e56266c4a7a 6848 gcab_0.7-2+deb9u1.debian.tar.xz
9644c91d08fe1513aed607046db79e2308221dbee2c09211ba5026984063cc4b 5967 gcab_0.7-2+deb9u1_source.buildinfo
Files:
265626a3387385af438c669e0fb74fa3 2342 utils optional gcab_0.7-2+deb9u1.dsc
d8c54c340e56d0b6a8fe082fd04d8090 332248 utils optional gcab_0.7.orig.tar.xz
842cd44fd15eee45b3034435389babb1 6848 utils optional gcab_0.7-2+deb9u1.debian.tar.xz
fb3733d883342ea934199e03f38227bc 5967 utils optional gcab_0.7-2+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlpi+mRfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89Et48P/1FtkEwGLFd8xuPWpaXyBb3jTr5lWJWP
7EvKe+ulauIoUsjPeJLDcAPMsvtllSlOU+/E17Nu63vQrTIIeQ5bH7QB+bmWs6yp
cljewkrehyG1aCzZ9yWY0zC1wrooCqQRYJSD+4dFtV032zIWo3AjWyDJuz738Jxx
Wlk5hyrzFmETkJTfa5Otx1LTDuDNlkSzixfIz57ZWf1EXax9AsgUGoguKG7zrCLr
oOdTEUG9QE3bkODZWEbjNdzjJjnxVGkNTXgm6FmeZyMqU/z8uRCo5E6QpUweJ9R0
KhsrSwOiea75V/FEcNJO2jC60o1WVmWdFgtG0ualxMG/GvDIVrxZG+smEYIA9KRh
lne47+IXU7fzInZMfn6X6i90egY42hlwduSFkDrCrST6wi1FlqvZCba91t5oaodJ
xrcouxXzD8wu6LAKTY9hSSOZrk6EGot/EbhEl6Y+FXVGIsX/FY8HFemdgWWdb16n
/UD91x/j102zhPw32LriLK4yiuoype4x9k9xRTqzX9kelexieZVSkHQXOsHg+/m1
GsMTI+Gq7XYcPHvWqu9fivWDJHYTp80V+TAPWRgVhtd7pOqq8A3U3q9kaOR4flx6
pSQX7wozRtrzKnDPL2jX8k3Ape+iR1lKFxO0kz8oAFpdB8AE4/DgKw7bUHbGpMRf
a3J7mTdEh6C3
=dhvU
-----END PGP SIGNATURE-----