Accepted pidgin 2.11.0-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 Jul 2016 19:16:45 +0200
Source: pidgin
Binary: libpurple0 pidgin pidgin-data pidgin-dev pidgin-dbg finch finch-dev libpurple-dev libpurple-bin
Architecture: all source
Version: 2.11.0-0+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Ari Pollak <ari@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
finch - text-based multi-protocol instant messaging client
finch-dev - text-based multi-protocol instant messaging client - development
libpurple-bin - multi-protocol instant messaging library - extra utilities
libpurple-dev - multi-protocol instant messaging library - development files
libpurple0 - multi-protocol instant messaging library
pidgin - graphical multi-protocol instant messaging client for X
pidgin-data - multi-protocol instant messaging client - data files
pidgin-dbg - Debugging symbols for Pidgin
pidgin-dev - multi-protocol instant messaging client - development files
Changes:
pidgin (2.11.0-0+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Imported Upstream version 2.11.0 to fix security issues:
- CVE-2016-4323 CVE-2016-2380 CVE-2016-2378 CVE-2016-2377 CVE-2016-2376
CVE-2016-2375 CVE-2016-2374 CVE-2016-2373 CVE-2016-2372 CVE-2016-2371
CVE-2016-2370 CVE-2016-2369 CVE-2016-2368 CVE-2016-2367 CVE-2016-2366
CVE-2016-2365
* Update libpurple0.symbols for 2.10.12 and 2.11.0
Checksums-Sha1:
9238e3b35075d7a49e4b8f42aec027476380135d 2852 pidgin_2.11.0-0+deb8u1.dsc
9738a424ac9f6da8b68ebf11af00c55cafd6b4d2 10037480 pidgin_2.11.0.orig.tar.bz2
51bf5cbf3e04dac35f3e3e746c7ca6600b60550e 62040 pidgin_2.11.0-0+deb8u1.debian.tar.xz
7f1e95ba9fae2044a56dc8695ab863bf89200aa7 4920246 pidgin-data_2.11.0-0+deb8u1_all.deb
d2094d945dacb2dea1f3a72ad2c801e286635dc2 2316764 pidgin-dev_2.11.0-0+deb8u1_all.deb
fb94ef21d72e422fd7c5f5cc8ec211b06afa34c9 143584 finch-dev_2.11.0-0+deb8u1_all.deb
8089222ec3307a76020d59740e4b11c8ee845076 258196 libpurple-dev_2.11.0-0+deb8u1_all.deb
d5d28a4c5c4f3a9ede95607d65379a6bfb27b0c2 122022 libpurple-bin_2.11.0-0+deb8u1_all.deb
Checksums-Sha256:
c3d311a5ef9655611a60668c35f069458f904834ed3498d8f8243019af405d19 2852 pidgin_2.11.0-0+deb8u1.dsc
f72613440586da3bdba6d58e718dce1b2c310adf8946de66d8077823e57b3333 10037480 pidgin_2.11.0.orig.tar.bz2
3e842f19cb788552d1f4a963f3efc4b74e311e49d257877f1451d7a2f6923d75 62040 pidgin_2.11.0-0+deb8u1.debian.tar.xz
14f5e82506f3790e70c7fbe262962db8a0f90822b3c67567d57a6aaf6ebafdda 4920246 pidgin-data_2.11.0-0+deb8u1_all.deb
d77543222c7aae9a16dd02a01b14a9a79a908d3381f481fbb539a97a436e01b8 2316764 pidgin-dev_2.11.0-0+deb8u1_all.deb
3507aa0c48d225fa2c6ac326a1a925d7f996077f396f4c96b1ff48d4f3b4cb7a 143584 finch-dev_2.11.0-0+deb8u1_all.deb
839fc1173c78ac8080ca6afccdb3694e3f796129fd1b4d9ef970c548c903ac07 258196 libpurple-dev_2.11.0-0+deb8u1_all.deb
9e8a4f85cab8205769c8044451a29ed73e9ec906d26ce9a36a27e51e047e9f1f 122022 libpurple-bin_2.11.0-0+deb8u1_all.deb
Files:
baff51aeab0499cbb1c0e994b2bf6168 2852 net optional pidgin_2.11.0-0+deb8u1.dsc
7b167474db669aab2f71fa46835fb83f 10037480 net optional pidgin_2.11.0.orig.tar.bz2
32c9feca2d679c94b54fe0a73648d01a 62040 net optional pidgin_2.11.0-0+deb8u1.debian.tar.xz
0009226133640e4c117236bb4196b482 4920246 net optional pidgin-data_2.11.0-0+deb8u1_all.deb
2dff1a804f054be4c1937d7db9c629b7 2316764 devel optional pidgin-dev_2.11.0-0+deb8u1_all.deb
3e287916bb75ba2ca6636630e88bc723 143584 devel optional finch-dev_2.11.0-0+deb8u1_all.deb
0f25ded9ff8bb9e1552c22f7f3324143 258196 libdevel optional libpurple-dev_2.11.0-0+deb8u1_all.deb
ac30efc3680c8b6831043ee48eec883a 122022 net optional libpurple-bin_2.11.0-0+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJXiLrnAAoJEAVMuPMTQ89EE2EQAIWgKYDvXc7EAtA2c0UVd7kt
7ZjfmoZztoSDtXCTG/6jQT/GkjCJVJiKbRa0rIetuq0RTil1CuAgbQIuNHhZfLiF
TWjxYqHuxCO7+dJt0GQmLhTf7HurMZal6dykz09LufHwHcLN8jZy2EWZ67v0fCCo
hpZ98OBAVXuMTLrbiTWg6cv5jYgPRH7lTnYoSNS8nxtHofzaq96yfeC6Gel0Qqnq
8ZynAcRNMgoNnxIxGExep+OEJw1o4QNem+JtKeR+nlpwePyHc3Q9HSh/snYxYOoA
iciMxJvhr+PZwV5gL9cieHELT3tFvkyrUZcmFef8J8tn2zZ7iIOCsRg1LBa6DbiT
DsxeCbusN2dJ5ijeUXVIDeDnciokDT04TxrGlfddBhceJM0NVauZHq5yajfhpBIG
sMqM4nFNf4nb+/A4eM5tAn/LMttGBLrEcpY9kfOACuthbm86t63T6IEzbrcJwfkp
LsDBhMWLpH1iH5Up5BLuf7HfC97ElVyq75g8Rom8Y7TMAXSLcvmRAKdxIxs67wkg
aZeiyq8sUYEJ8xyGjeZVeNUfevQTk23zxm0Sh62Uw7NOcRbNBVXypEaRGdhJ2eNt
tKpC0K/yOFryUj5Ss7IXiuWDPeYzfIqjYkNkx6ko5/11PTpioma/n5cDlaWFGY7m
m1vPOf4Wy/MHCpu6lxwx
=07f7
-----END PGP SIGNATURE-----