Accepted libzip-ruby 0.9.4-1+deb7u1 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 06 Mar 2017 21:19:29 +0100
Source: libzip-ruby
Binary: libzip-ruby1.8 libzip-ruby1.9.1
Architecture: source all
Version: 0.9.4-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Tatsuki Sugiura <sugi@nemui.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libzip-ruby1.8 - a ruby module for reading and writing zip files
libzip-ruby1.9.1 - a ruby module for reading and writing zip files
Changes:
libzip-ruby (0.9.4-1+deb7u1) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2017-5946:
It was discovered that libzip-ruby, a Ruby module for reading and writing
zip files, is prone to a directory traversal vulnerability. An attacker can
take advantage of this flaw to overwrite arbitrary files during archive
extraction via a .. (dot dot) in an extracted filename.
Checksums-Sha1:
662dac7cb13cfe58139f18d91434d7eeec806dbd 2078 libzip-ruby_0.9.4-1+deb7u1.dsc
87fcc83b7011b43f589ae1617a931a20da679036 63696 libzip-ruby_0.9.4.orig.tar.gz
ae2fd9502a4d29f56f0dbe4041031d1cf813a7f8 4030 libzip-ruby_0.9.4-1+deb7u1.debian.tar.gz
250b4e51ac802cf893d9c53ff8eca7581fefb5e0 43044 libzip-ruby1.8_0.9.4-1+deb7u1_all.deb
471e0807860ebc0b238ec1ef82765e39150d795d 42900 libzip-ruby1.9.1_0.9.4-1+deb7u1_all.deb
Checksums-Sha256:
c3d0a4bd374b448997232a20bbc1bdf57d0de22b92985e539980126ecc2becdf 2078 libzip-ruby_0.9.4-1+deb7u1.dsc
8e13d1a34cb35998b508e3aee0db74d124d2108ec6785475c15f5e8befada5c0 63696 libzip-ruby_0.9.4.orig.tar.gz
813efbf7644d599b7b6aef1b6ec71cdf59d9f5ae3a1981a69fa22a7ee155bffd 4030 libzip-ruby_0.9.4-1+deb7u1.debian.tar.gz
6865cd3a01e55de5f39c70527af30d6feda59d18cd2b8a32297a56af4b6b6cc5 43044 libzip-ruby1.8_0.9.4-1+deb7u1_all.deb
136d1146854464a53df61441bcd2711ff9547ea749a1bb3209e184bce2158b72 42900 libzip-ruby1.9.1_0.9.4-1+deb7u1_all.deb
Files:
e71638fa5b7ff1ea857de6b602af855f 2078 ruby optional libzip-ruby_0.9.4-1+deb7u1.dsc
501f9e271ae3c0f487e5017e10058097 63696 ruby optional libzip-ruby_0.9.4.orig.tar.gz
f4e15464f3ba7ac8413671c049f13c33 4030 ruby optional libzip-ruby_0.9.4-1+deb7u1.debian.tar.gz
ab41e412ee17b0745a592e1114a8f37d 43044 ruby optional libzip-ruby1.8_0.9.4-1+deb7u1_all.deb
6b3e67d302aeb5923e95aadd15b9f350 42900 ruby optional libzip-ruby1.9.1_0.9.4-1+deb7u1_all.deb
-----BEGIN PGP SIGNATURE-----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=ODXK
-----END PGP SIGNATURE-----