Accepted signing-party 2.10-2 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 05 May 2019 15:13:54 +0200
Source: signing-party
Architecture: source
Version: 2.10-2
Distribution: unstable
Urgency: high
Maintainer: Guilhem Moulin <guilhem@debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 928256
Changes:
signing-party (2.10-2) unstable; urgency=high
.
* gpg-key2ps: Security fix for CVE-2019-11627: unsafe shell call enabling
shell injection via a User ID. Use Perl's (core) module Encode.pm instead
of shelling out to `iconv`. (Closes: #928256.)
Checksums-Sha1:
cbfe0e33d310f4e460b0524326cb3565a03236df 1953 signing-party_2.10-2.dsc
6baf98f21af48b3aa5b5d26a41c4a87646b7ee94 222778 signing-party_2.10.orig.tar.gz
1cd39383e45d69553c553667541b5bcfba243d26 20820 signing-party_2.10-2.debian.tar.xz
fa5a9caff60e2ca4e5cf8abccaa5f852b0b3bcc1 6603 signing-party_2.10-2_amd64.buildinfo
Checksums-Sha256:
28701115b3339520f31da472f68b35876a8c1688c55dbadf896a1aac446c87ff 1953 signing-party_2.10-2.dsc
e19416cbd2bc723593334e2471d311f413794faa751b8b2e452e0792fc0431eb 222778 signing-party_2.10.orig.tar.gz
05e133cc1a941b6676487c0e91fb60b70e2417f81843aa41245855ccc8de6c97 20820 signing-party_2.10-2.debian.tar.xz
61d677ddf41f3671eac53a8e5c325223de6f421be5f687882fa7ea65fefd7172 6603 signing-party_2.10-2_amd64.buildinfo
Files:
812c243be9fe08204913c72852b5b6cb 1953 misc optional signing-party_2.10-2.dsc
9a8861395a81164067a6d88a34f029dd 222778 misc optional signing-party_2.10.orig.tar.gz
cb7b6cdcc5906a0148c9f9447ed137b8 20820 misc optional signing-party_2.10-2.debian.tar.xz
4bf57883d80e4b193a480d63006aaf3e 6603 misc optional signing-party_2.10-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Txd4
-----END PGP SIGNATURE-----