Accepted rar 2:6.23-1~deb10u1 (source) into oldoldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted rar 2:6.23-1~deb10u1 (source) into oldoldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sun, 27 Aug 2023 06:00:21 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: rar_6.23-1~deb10u1_source.changes
- Debian-source: rar
- Debian-suite: oldoldstable
- Debian-version: 2:6.23-1~deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=t92ad68ThTyoYrEXvHf3gcynEbMN5Rr4x0Z0ZEFrbP4=; b=VNsaMWPGNYmpIYKzzsnoz2IfBr duR/zX74bhnM5SZ+xMj5sX7u0YiCbX72wHDta88xmqqnOQs27tfuaDfGouVC1g2GEwXKchHGaYC5G wcPJlUBTKMSSLXBn3zz6O2Qsx69bEXpFuxGKmKUCp0RURaPFHkSAqObXH88ee+gGnvaDl6En76ceR /lDkcCqYNNqNL9y72U0kv76Fm9hmRCpIlt6CjCGgYbyXFxbKQDHsC5k7UUACsv2HFdhKsribi9lOr CENZlJ7DZVTiidzwZgadOtjWEBfb0HvTMjqJzeElofZ111/VuhFaZvyivAKohu3c8lu7lcbhigKf8 osiZgVyA==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1qa8ov-005AV8-2p@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Aug 2023 07:38:21 +0200
Source: rar
Architecture: source
Version: 2:6.23-1~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Martin Meredith <mez@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Changes:
rar (2:6.23-1~deb10u1) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2023-40477:
A specific flaw within the processing of recovery volumes exists in RAR,
an archive program for rar files. It allows remote attackers to execute
arbitrary code on affected installations. User interaction is required to
exploit this vulnerability. The target must visit a malicious page or open
a malicious rar file.
Checksums-Sha1:
01dad0e8173db0d68eeb192e2e83d57cc619b827 2166 rar_6.23-1~deb10u1.dsc
5f623a7f849d094dfb4dd670b346968b9ecf872b 614350 rar_6.23.orig-amd64.tar.gz
2ab8d91d4d267bfc19d1893bcf36c160e09840e1 627653 rar_6.23.orig.tar.gz
8a8acf48be458408b32f0122b9f6d6d9782739f8 11136 rar_6.23-1~deb10u1.debian.tar.xz
ce2d3efe6017aff2f6f17f257f34d0120b079b6b 5351 rar_6.23-1~deb10u1_source.buildinfo
Checksums-Sha256:
f680214ae1daa674ef5cab8230687fb73ae28aee3fa0be5ff949cc1c35d897f8 2166 rar_6.23-1~deb10u1.dsc
a17002df0d47f65486a93fdbd84b5a50a16302f76873f88bccad0c8c126169dc 614350 rar_6.23.orig-amd64.tar.gz
090f5e32112fcf1a19bdd8d3c1905ed839ebeade4f7be03a5d2db61b2e6595a6 627653 rar_6.23.orig.tar.gz
88d2859cd34360e41a2218a1d86bb6ece06df3a2adea91d052220877c5f2faf0 11136 rar_6.23-1~deb10u1.debian.tar.xz
cc8785e72fd60f05849531f6f35d8a52d946da2a78b90dc42dd7965dc000a110 5351 rar_6.23-1~deb10u1_source.buildinfo
Files:
5698893f75b9e9ab4fbddc71ff822ea1 2166 non-free/utils optional rar_6.23-1~deb10u1.dsc
89cbf9a8306eb24ee82b2e9270896e2a 614350 non-free/utils optional rar_6.23.orig-amd64.tar.gz
886aaf5485284103748a742b46f1d80b 627653 non-free/utils optional rar_6.23.orig.tar.gz
1ebca727d4fcb3e822a218f1550ed76e 11136 non-free/utils optional rar_6.23-1~deb10u1.debian.tar.xz
1fa053ea929df8cb26b3e5aca1af1fe8 5351 non-free/utils optional rar_6.23-1~deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmTq41ZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1Hky/UP/RMIi+gyup+2s506lK/v4iDnRAutNlJuSfa4
e9pIXa03uhHLA/NAi56yPPKrW6TirFSb/mFMR56UyIgywdG4dYssbWWGevrG6ylQ
XIHtQdhX6uO+pwDcedMFT9FQP6XqSPjGUL6SnbziCdy4BQX7XQ1iAsatZTeaG3rC
PsiDKhlRlX4TFVmytJOkVt/TYSY8eU7Q2QcbQQzM2eNIr95PSk9DgcJSSShSttnd
y71LLPwj9BZl3VMdvjCHhAGziivIWqSqwSRln579LhEXaiCBMPUz99k0xo+X9iKk
mfQGs8EsUxeFaOOtEOTcWjw4HKLHkYEFSca+GZR7ElTchV2wRI8Hmax7Jh/VYRIr
pzT0llBeXqDMCSZD0z5BaTwyRLP43nm6QIIQe8lNYCznsbfGwVPWSSO1G0TwlIAL
V6zyaJOii8UZo4gqdh2mvxyPbSvr//yoC11qpAgzOnL8H28bohWx3/k0yab5SaI0
rknDxSdTQJOYHcPSAFw6yRAbEZnZgdFhCH2nVtlqVq4+vtqjkg50sg9aplrPQpgW
Y5QJakvWnGXMylBRmHE0ZB8Goa1qzrSSHuQwCceiUFhfrw2J9gsjiDZNzgirr3q3
XF+vjHZUEUu4VIF2IGtau+MlQ9rvSYg713VXJayXpK3sg2pzXYZYhv1kHfs7bXcO
olvLaFd9
=PyuT
-----END PGP SIGNATURE-----