Accepted signing-party 2.5-1+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 01 May 2019 12:55:42 +0200
Source: signing-party
Binary: signing-party
Architecture: source
Version: 2.5-1+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Guilhem Moulin <guilhem@debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
signing-party - Various OpenPGP related tools
Closes: 928256
Changes:
signing-party (2.5-1+deb9u1) stretch; urgency=medium
.
* Backport security fix for CVE-2019-11627: unsafe shell call enabling shell
injection via a User ID. Use Perl's (core) module Encode.pm instead of
shelling out to `iconv`. (Closes: #928256.)
Checksums-Sha1:
dc4ac1cdec8e3e7863577f7436f92812339c947e 1983 signing-party_2.5-1+deb9u1.dsc
c8b0852484ecf8b786be0d780a8750d473aef6eb 20220 signing-party_2.5-1+deb9u1.debian.tar.xz
63b84f61f1c297fa22a5dc888da4ed1be14c51d2 6872 signing-party_2.5-1+deb9u1_amd64.buildinfo
Checksums-Sha256:
00cd0e25c88df8a2f5142b6f2f1a25e5c0b4e92aa78ef2245d662fb259448cc4 1983 signing-party_2.5-1+deb9u1.dsc
5634b87ab930b088be6f49de76b256025e74430f0925bc10f28c451ff1e1cbf0 20220 signing-party_2.5-1+deb9u1.debian.tar.xz
676392de516b75506e383d9055c379f3852ca9c9d511b105de30efc1117df6f7 6872 signing-party_2.5-1+deb9u1_amd64.buildinfo
Files:
2a3c4e3072e621fa853321a38468e9a1 1983 misc extra signing-party_2.5-1+deb9u1.dsc
3e43828793e299362a1e9be8fa2fbca8 20220 misc extra signing-party_2.5-1+deb9u1.debian.tar.xz
1ca7d4abedb08c2fb8ddbde6fa900ca2 6872 misc extra signing-party_2.5-1+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Sqmg
-----END PGP SIGNATURE-----