Accepted libmspack 0.5-1+deb8u2 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 06 Aug 2018 17:01:04 +0800
Source: libmspack
Binary: libmspack0 libmspack-dev libmspack-dbg libmspack-doc
Architecture: source amd64 all
Version: 0.5-1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Marc Dequènes (Duck) <Duck@DuckCorp.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
libmspack-dbg - library for Microsoft compression formats (debugging symbols)
libmspack-dev - library for Microsoft compression formats (development files)
libmspack-doc - library for Microsoft compression formats (documentation)
libmspack0 - library for Microsoft compression formats (shared library)
Closes: 904799 904800 904801 904802
Changes:
libmspack (0.5-1+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload.
* Add security related patches:
- 0b0ef9344255 ("kwaj_read_headers(): fix handling of non-terminated
strings") CVE-2018-14681 (Closes: 904799).
- 4fd9ccaa54e1 ("Fix off-by-one error in chmd TOLOWER() fallback")
CVE-2018-14682 (Closes: 904800).
- 72e70a921f0f ("Fix off-by-one bounds check on CHM PMGI/PMGL chunk
numbers and reject empty filenames.") CVE-2018-14679,
CVE-2018-14680 (Closes: 904802, 904801).
Checksums-Sha1:
e3274dc93eae4a52536c9ff8a30a45aae21821a6 2106 libmspack_0.5-1+deb8u2.dsc
226f19b1fc58e820671a1749983b06896e108cc4 654193 libmspack_0.5.orig.tar.gz
760c5302fcc948b2e0278e8001487b8be615a3be 7120 libmspack_0.5-1+deb8u2.debian.tar.xz
a3c175b079db2fd403c31b491e78ebc4cadd4c89 89130 libmspack-dbg_0.5-1+deb8u2_amd64.deb
06ccc3ceb5494adecfb7210d4510f0db2cba3ded 64384 libmspack-dev_0.5-1+deb8u2_amd64.deb
3fcca75004bfb9b9bd5ccd37dd7e1f2c89787e32 100882 libmspack-doc_0.5-1+deb8u2_all.deb
a9fe444fc4028bb92feddb57db7830f5579c80c5 46094 libmspack0_0.5-1+deb8u2_amd64.deb
beb056900a1f0009663062f48410569ffa1ef95b 6574 libmspack_0.5-1+deb8u2_amd64.buildinfo
Checksums-Sha256:
ed54f8e865445b848fbb1d8ef5caf51df89aaf3c5d2a7bdf382c7a8bc9a1f11b 2106 libmspack_0.5-1+deb8u2.dsc
8967f275525f5067b364cee43b73e44d0433668c39f9376dfff19f653d1c8110 654193 libmspack_0.5.orig.tar.gz
f4976aa07ca1c3ba3195145e4927280395d2f2be03164b18240c301cf4543e28 7120 libmspack_0.5-1+deb8u2.debian.tar.xz
5bbac834e998924c7eecddc07ca4a2bc7c81f1f7d5952da2023d81d9294495ed 89130 libmspack-dbg_0.5-1+deb8u2_amd64.deb
072cd87de471283545b994289102d2a4c0e8eee38df307da24a01c31f6a3b280 64384 libmspack-dev_0.5-1+deb8u2_amd64.deb
f4aac162111c0368e71e8e5b068156434155832ea534600daa3509e1552a290c 100882 libmspack-doc_0.5-1+deb8u2_all.deb
1ca8f6b75dd31ae0564c36a67e28d5c87558d0df6eb1280b3c4090f1c1ae3ae2 46094 libmspack0_0.5-1+deb8u2_amd64.deb
4fdf57c466b151486f0e9a76e78a4d932e30a9228f218fe4be97a502d15acef5 6574 libmspack_0.5-1+deb8u2_amd64.buildinfo
Files:
fd1b33fab74ad49ea79248c068038162 2106 libs optional libmspack_0.5-1+deb8u2.dsc
3aa3f6b9ef101463270c085478fda1da 654193 libs optional libmspack_0.5.orig.tar.gz
b8f378421f2135a7de27323180116561 7120 libs optional libmspack_0.5-1+deb8u2.debian.tar.xz
e36d9d70d44bd84b511d5bd13b9bc5ce 89130 debug extra libmspack-dbg_0.5-1+deb8u2_amd64.deb
f1d87cf6106c9775a738913322738e0a 64384 libdevel optional libmspack-dev_0.5-1+deb8u2_amd64.deb
3e12874a5f3b1eb35ab785234be1b4a9 100882 doc optional libmspack-doc_0.5-1+deb8u2_all.deb
567e8095f9ca2896b17e018d4624d46d 46094 libs optional libmspack0_0.5-1+deb8u2_amd64.deb
1880b7c8af0222458de76d99b40d6891 6574 libs optional libmspack_0.5-1+deb8u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=jvAv
-----END PGP SIGNATURE-----