Accepted libtasn1-3 2.13-2+deb7u3 (source i386) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 30 May 2016 18:03:02 +0200
Source: libtasn1-3
Binary: libtasn1-3-dev libtasn1-3-dbg libtasn1-3 libtasn1-3-bin
Architecture: source i386
Version: 2.13-2+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libtasn1-3 - Manage ASN.1 structures (runtime)
libtasn1-3-bin - Manage ASN.1 structures (binaries)
libtasn1-3-dbg - Manage ASN.1 structures (debugging symbols)
libtasn1-3-dev - Manage ASN.1 structures (development)
Changes:
libtasn1-3 (2.13-2+deb7u3) wheezy-security; urgency=high
.
* Non-maintainer upload by the Wheezy LTS Team.
* CVE-2016-4008: infinite loop while parsing DER certificates
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1
before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag,
allows remote attackers to cause a denial of service
(infinite recursion) via a crafted certificate.
Checksums-Sha1:
f319e711317856ea87b298a79493ce421945f9f9 2449 libtasn1-3_2.13-2+deb7u3.dsc
89120584bfedd244dab92df99e955a174c481851 1964659 libtasn1-3_2.13.orig.tar.gz
675c03d801cdb268641b7049cb847d4f0477c51e 12997 libtasn1-3_2.13-2+deb7u3.debian.tar.gz
469b84e6fb889faa46fd6b987caf8593ce60b513 386324 libtasn1-3-dev_2.13-2+deb7u3_i386.deb
5ee72f4fb73f4c0ea3b364dcc25bd8f08d9ad8a6 145974 libtasn1-3-dbg_2.13-2+deb7u3_i386.deb
4223592b48ea54bbc1a03096e9d56d0314d3f746 68652 libtasn1-3_2.13-2+deb7u3_i386.deb
5af5ae19dd34f24c3d1f462b8cc5a8f249047603 52532 libtasn1-3-bin_2.13-2+deb7u3_i386.deb
Checksums-Sha256:
ca560f91c6285bca3e646e00edd5877b60960db60991f27b7a5870645d120485 2449 libtasn1-3_2.13-2+deb7u3.dsc
a56e46483d1d42fe44ba58c9758620844042468d7c2d75f6318cdf3222745a91 1964659 libtasn1-3_2.13.orig.tar.gz
a1dd6bcb4571cea300192c7bd29ff5b33d4e53684d29cb6bd2fb4c05f2bf9fe1 12997 libtasn1-3_2.13-2+deb7u3.debian.tar.gz
9af7b6bfd37b940e9e55aa3d6556ff3f914714e5faeb459ebe2e1d9715718ba1 386324 libtasn1-3-dev_2.13-2+deb7u3_i386.deb
d2abcfe31fd65d2defb3827d13b2b3d2f35815bf186eb52a4ffe1146ee2108c7 145974 libtasn1-3-dbg_2.13-2+deb7u3_i386.deb
31f263aa5ab3ef608fd15ea7e81bcb0afab0c7bddd557ac917a954f46bd0909a 68652 libtasn1-3_2.13-2+deb7u3_i386.deb
f8c786a21361802717269ca3980d3a5314e10628458bfc2a9530274620597609 52532 libtasn1-3-bin_2.13-2+deb7u3_i386.deb
Files:
5e080b4638e619c572d6234ad5710363 2449 libs standard libtasn1-3_2.13-2+deb7u3.dsc
df27eaddcc46172377e6b907e33ddc83 1964659 libs standard libtasn1-3_2.13.orig.tar.gz
4308f8c9403584121a64b21332650ea7 12997 libs standard libtasn1-3_2.13-2+deb7u3.debian.tar.gz
5be6717026b2b41d342425c8d89a0535 386324 libdevel optional libtasn1-3-dev_2.13-2+deb7u3_i386.deb
821747894d52dbeb80ec6d43d2d56f67 145974 debug extra libtasn1-3-dbg_2.13-2+deb7u3_i386.deb
2247bdd066e7241aefe622186ecfdf85 68652 libs standard libtasn1-3_2.13-2+deb7u3_i386.deb
8bb7ed84424382ba542c3b26db46bab1 52532 devel extra libtasn1-3-bin_2.13-2+deb7u3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQJ8BAEBCgBmBQJXTIIjXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2MjAxRkJGRkRCQkRFMDc4MjJFQUJCOTY5
NkZDQUMwRDM4N0I1ODQ3AAoJEJb8rA04e1hH0CgQAIDFF9kGCzrC0YQEaaERfl3R
XS87mmm6k4rc+fIjIlwSWsouVNZmHTtQX2V9azRg20G79XMjDgmzJC/nj+Gg2/xn
tY7nWpGf1pNT5rQbSA/vM6N7aMZ7y/24ddt6YmD9b/hg/BkwsKQSX+yKHsTuRKUK
f5HF3V3UaYtwu6gI7oczp6AxNubdbgthJ5SqFmXAYAgM3Sl/O+tTQHsneADaW1Z7
9kiZBfgnD44nCcuXgpw6S5DztqbMUQSxLSn1rXkEN9gfnmhGfFSbY7QXwCjRKeOs
ec2sh0ID0DlDhs7mnoHXMe5B2fiP8FUyxgdwS4WLvQ4aKhBzuVnd7P/ru8NBTADX
hMwIk9g4gXg6fbjkEr9cOtsBWDZud4ZpxHhAhW8GKzkGIOswqjrKuVHa15n7qqYD
mp4rcnOcp6Nj6bgs52xtzIa5Feapejkt8qn9XxgO3PuuWAdSECRQ3eRSbmvYSyPv
6J1cJGyqrtNYHWftilDmefhPsdLNRDnXm4l7cPbeMz+FAVsLk+9rOvTTSeG6vyM0
YAxuqeZn8aajRHwzC37wfr+cg7GK6pk9DrTMXdCyV64JyMM585YdcHv6HLl+61aD
puK6jBIiczBpih3FBD8U99h1AiA6T67rcKJLK15vYew1XSAbQNTawMA/rQ7qVsvn
PhQYoqcX9yzDEDtyptUU
=2yrJ
-----END PGP SIGNATURE-----