Accepted librelp 1.2.7-2+deb8u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 24 Mar 2018 22:49:53 +0100
Source: librelp
Binary: librelp0 librelp-dev
Architecture: source
Version: 1.2.7-2+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Michael Biebl <biebl@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
librelp-dev - Reliable Event Logging Protocol (RELP) library - development file
librelp0 - Reliable Event Logging Protocol (RELP) library
Changes:
librelp (1.2.7-2+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Stack-based buffer overflow in relpTcpChkPeerName function
(CVE-2018-1000140)
Checksums-Sha1:
0054dd38e93f03509ac71af538fb3711a5a20be8 2126 librelp_1.2.7-2+deb8u1.dsc
060097280a8f5ff3365c3455c9f12eddaa72dc10 410896 librelp_1.2.7.orig.tar.gz
b0b85e737075dfc96a88c920afeb5bbf452e0baa 5300 librelp_1.2.7-2+deb8u1.debian.tar.xz
Checksums-Sha256:
9855ae004c48b31111ac2c19d0955f776b618abcd98d7ef768c1b8ca97cf6393 2126 librelp_1.2.7-2+deb8u1.dsc
3a434a1c71772706104cfb1c93ba8e6809d257851d60de29ac2142c60c68d7d1 410896 librelp_1.2.7.orig.tar.gz
e3029d27fe592c72876acff65b7223f34922655122727f719fcf431ea563c8e7 5300 librelp_1.2.7-2+deb8u1.debian.tar.xz
Files:
ec2cede9876b3d9748bbaa99b7803682 2126 libs optional librelp_1.2.7-2+deb8u1.dsc
26e02602490af3a681a2a13e6ce29efb 410896 libs optional librelp_1.2.7.orig.tar.gz
67bcca6cfaefd9ea0052974aa89e49c0 5300 libs optional librelp_1.2.7-2+deb8u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=0he1
-----END PGP SIGNATURE-----