Accepted libmspack 0.5-1+deb9u4 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 31 Oct 2021 19:58:39 +0200
Source: libmspack
Binary: libmspack0 libmspack-dev libmspack-dbg libmspack-doc
Architecture: source
Version: 0.5-1+deb9u4
Distribution: stretch-security
Urgency: medium
Maintainer: Marc Dequènes (Duck) <Duck@DuckCorp.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
libmspack-dbg - library for Microsoft compression formats (debugging symbols)
libmspack-dev - library for Microsoft compression formats (development files)
libmspack-doc - library for Microsoft compression formats (documentation)
libmspack0 - library for Microsoft compression formats (shared library)
Changes:
libmspack (0.5-1+deb9u4) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* CVE-2019-1010305
Opening a crafted chm file might result in a buffer overflow.
Checksums-Sha1:
0a817a7279ea572fbb6b02348e4637ac77a037c4 2106 libmspack_0.5-1+deb9u4.dsc
226f19b1fc58e820671a1749983b06896e108cc4 654193 libmspack_0.5.orig.tar.gz
96c7247ec83a97140261f68f09b8ed32fef0dbbb 8376 libmspack_0.5-1+deb9u4.debian.tar.xz
Checksums-Sha256:
426ef1b4139a7f797788e3e342aa76255b27203569476a0ad2c73f6121bb15e2 2106 libmspack_0.5-1+deb9u4.dsc
8967f275525f5067b364cee43b73e44d0433668c39f9376dfff19f653d1c8110 654193 libmspack_0.5.orig.tar.gz
53f844d9c2c854d35c235a741b828487259fa99d090686c361b601ff12a760ed 8376 libmspack_0.5-1+deb9u4.debian.tar.xz
Files:
26f3bb3e7aa176204ba5f606f6710329 2106 libs optional libmspack_0.5-1+deb9u4.dsc
3aa3f6b9ef101463270c085478fda1da 654193 libs optional libmspack_0.5.orig.tar.gz
815e758008ab2bd32a23f83f7e3ec167 8376 libs optional libmspack_0.5-1+deb9u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=VsEU
-----END PGP SIGNATURE-----