Accepted mime-support 3.58 (source all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Dec 2014 14:45:59 +0900
Source: mime-support
Binary: mime-support
Architecture: source all
Version: 3.58
Distribution: unstable
Urgency: high
Maintainer: Mime-Support Maintainers <mime-support@plessy.org>
Changed-By: Charles Plessy <plessy@debian.org>
Description:
mime-support - MIME files 'mime.types' & 'mailcap', and support programs
Changes:
mime-support (3.58) unstable; urgency=high
.
* CVE-2014-7209: run-mailcap shell command injection.
Thanks to Timothy D. Morgan for the report.
.
d156797 Escape file name also when not passed through %s. This
avoids command injections using for instance semicolons.
b585022 Resolve file name to an absolute path to avoid injection of
command arguments with file names starting with dashes etc.
Use File::Spec to avoid race conditions with temporary files.
Thanks, Salvatore Bonaccorso for the patch.
Checksums-Sha1:
bd04699c9c4df5fa08e0da5e74d92ff9977221ab 1604 mime-support_3.58.dsc
5e8c8dc952aee1adc589dbc1a2526f3eb83fd293 34995 mime-support_3.58.tar.gz
ad875319f0048ed742d3cb60f00d437a7db98790 35994 mime-support_3.58_all.deb
Checksums-Sha256:
3279480870a7bd6c7e2a85f7f1e5deba50c3cb5edcbd6ce69a3cfc7fe0266284 1604 mime-support_3.58.dsc
3d9ca5115e93edb3ada3fb120cde88ac3d866903e18a41ca124428d77dd1721e 34995 mime-support_3.58.tar.gz
c05ebe8f38da4ff19d028c9f4680414149e5c7a746de13bc9db0a562796ed213 35994 mime-support_3.58_all.deb
Files:
c63a0f86e02b1c0e382f5d72e89138ab 1604 net standard mime-support_3.58.dsc
461430b0c9356ff3d7b0f0b61f9edf53 34995 net standard mime-support_3.58.tar.gz
81e70b10c1aeaa6e54eb436c842b5501 35994 net standard mime-support_3.58_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=iq5v
-----END PGP SIGNATURE-----