Accepted libmspack 0.5-1+deb8u3 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 26 Oct 2018 19:03:02 +0200
Source: libmspack
Binary: libmspack0 libmspack-dev libmspack-dbg libmspack-doc
Architecture: source amd64 all
Version: 0.5-1+deb8u3
Distribution: jessie-security
Urgency: high
Maintainer: Marc Dequènes (Duck) <Duck@DuckCorp.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libmspack-dbg - library for Microsoft compression formats (debugging symbols)
libmspack-dev - library for Microsoft compression formats (development files)
libmspack-doc - library for Microsoft compression formats (documentation)
libmspack0 - library for Microsoft compression formats (shared library)
Changes:
libmspack (0.5-1+deb8u3) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2018-18584
Fixing the size of the CAB block input buffer, which is too small
for the maximal Quantum block, prevents an out-of-bounds write.
* CVE-2018-18585
Blank filenames (having length zero or their 1st or 2nd byte is
null) should be rejected.
Checksums-Sha1:
b183c434fb9bf39ceee83dd3cc13cae6ae41c35c 2265 libmspack_0.5-1+deb8u3.dsc
226f19b1fc58e820671a1749983b06896e108cc4 654193 libmspack_0.5.orig.tar.gz
651329b18d7531bd3c0f210f6812ed29e29dcd6a 8076 libmspack_0.5-1+deb8u3.debian.tar.xz
56826d53efe650571a000b4cca518aa563fcfcfb 47910 libmspack0_0.5-1+deb8u3_amd64.deb
c7ca5ab5d158eabfd58da9013b31acdb7650737f 66264 libmspack-dev_0.5-1+deb8u3_amd64.deb
ec0625a6cf40abfbec584b7e6d25d6999e5885df 85194 libmspack-dbg_0.5-1+deb8u3_amd64.deb
7a7158f76bb412d4b2cf209483d8f0ed89224a81 102702 libmspack-doc_0.5-1+deb8u3_all.deb
Checksums-Sha256:
e09f0a0b9855cfd9b20924b97c9200d11746be39f388edf3940553bb73a0b533 2265 libmspack_0.5-1+deb8u3.dsc
8967f275525f5067b364cee43b73e44d0433668c39f9376dfff19f653d1c8110 654193 libmspack_0.5.orig.tar.gz
2b803f86a4b1f52a73e81d53e5e1bfd8e05baa19637f70c7ce7bc2e56d26d89b 8076 libmspack_0.5-1+deb8u3.debian.tar.xz
29815f49b83e919fe6175940b2cf220c2f74146a2550178fdcacd5b8c0f464bf 47910 libmspack0_0.5-1+deb8u3_amd64.deb
55e64d9bb84c014974c3e6bf50a5008836ec11060f828a79ee44b6e4263fdbce 66264 libmspack-dev_0.5-1+deb8u3_amd64.deb
352cab579fd2836bfb5a4177faa5d1f18933807498acc5a19cf141b519f005c4 85194 libmspack-dbg_0.5-1+deb8u3_amd64.deb
3e9846d489b73d1d48ecba3378c9a7836daab5ea756afe2c48d07e6994d72d84 102702 libmspack-doc_0.5-1+deb8u3_all.deb
Files:
78545a77afae497fd5a9118905b72f3d 2265 libs optional libmspack_0.5-1+deb8u3.dsc
3aa3f6b9ef101463270c085478fda1da 654193 libs optional libmspack_0.5.orig.tar.gz
7abcae4456d5928732103f2baf2ad078 8076 libs optional libmspack_0.5-1+deb8u3.debian.tar.xz
c052cb6b328d9887abd58474e80fbd27 47910 libs optional libmspack0_0.5-1+deb8u3_amd64.deb
8977645d1e65bfa999120b87f97daf6e 66264 libdevel optional libmspack-dev_0.5-1+deb8u3_amd64.deb
38bfe95f754ed93f5e1048201a6a0dec 85194 debug extra libmspack-dbg_0.5-1+deb8u3_amd64.deb
ae2bdfb656aa3ef97162515329725dc6 102702 doc optional libmspack-doc_0.5-1+deb8u3_all.deb
-----BEGIN PGP SIGNATURE-----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=fKa2
-----END PGP SIGNATURE-----