Accepted libclamunrar 0.101.2-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 30 Mar 2019 16:37:10 +0100
Source: libclamunrar
Architecture: source
Version: 0.101.2-1
Distribution: unstable
Urgency: high
Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Changes:
libclamunrar (0.101.2-1) unstable; urgency=high
.
* Import 0.101.2
- CVE-2019-1785 (A path-traversal write condition may occur as a result of
improper input validation when scanning RAR archives)
- CVE-2019-1798 (A use-after-free condition may occur as a result of
improper error handling when scanning nested RAR archives)
Checksums-Sha1:
23c817882e1dfa2535dfe2c31ed4c89f31e2771f 1973 libclamunrar_0.101.2-1.dsc
6f660fc27166a75b0e336b82769b242bf0471374 487968 libclamunrar_0.101.2.orig.tar.xz
7d56cecbfbae09c524177b1aa942ec228d06e0f4 6580 libclamunrar_0.101.2-1.debian.tar.xz
9a2028eb2adce97fe0f8bae51e06489f2876f1bf 5149 libclamunrar_0.101.2-1_source.buildinfo
Checksums-Sha256:
040e99299b35fc7ee584d7309f1e051e27ac02737edecc4511df04443719bb17 1973 libclamunrar_0.101.2-1.dsc
754d0ac5d71e748a021e459969378eb204b9a239530903dcdfa8479df2e0b8a2 487968 libclamunrar_0.101.2.orig.tar.xz
29cbf10f875f64118b19f89b4c34cc733ceb96cf2d43dd3cb0bfd9d35225b195 6580 libclamunrar_0.101.2-1.debian.tar.xz
45816f2750f0b675d489283068dd262c6ac405fedadd72c495c6578d850107bd 5149 libclamunrar_0.101.2-1_source.buildinfo
Files:
2bec6d5f2884b4118bf566c489e99d9d 1973 non-free/libs optional libclamunrar_0.101.2-1.dsc
c8052a500894d5fda896fd8f2a5124b1 487968 non-free/libs optional libclamunrar_0.101.2.orig.tar.xz
d83ee6f06763468e8f3550f1d5ed8caa 6580 non-free/libs optional libclamunrar_0.101.2-1.debian.tar.xz
7d06123f19182c09edb2cbdebd51454e 5149 non-free/libs optional libclamunrar_0.101.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=CYOd
-----END PGP SIGNATURE-----