Accepted glib2.0 2.58.3-2+deb10u2 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 06 Nov 2019 08:29:15 + Source: glib2.0 Architecture: source Version: 2.58.3-2+deb10u2 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 941018 Changes: glib2.0 (2.58.3-2+deb10u2) buster; urgency=medium . * Team upload * d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch, d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch: Ensure libdbus clients can authenticate with a GDBusServer like the one in ibus, backported from upstream 2.62.x branch (Closes: #941018) * d/p/Add-a-test-for-GDBusServer-authentication.patch, d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch, d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch: Backport regression test for #941018 * Build-depend on libdbus-1-dev for better test coverage * d/control.in: Set branch to debian/buster in Vcs-Git Checksums-Sha1: 67223876134dfff9c56a1cb899472f348d57fb26 3466 glib2.0_2.58.3-2+deb10u2.dsc 227a1925e7e4ccbc59a1651d522f32edffa0f688 93604 glib2.0_2.58.3-2+deb10u2.debian.tar.xz 386dbde513fc1bbd69d7453e56d7d6f72f039348 8280 glib2.0_2.58.3-2+deb10u2_source.buildinfo Checksums-Sha256: 585667486fca2f2a32c04670e1008c5e0ff0cd96024c8618a3e78ee546d85a12 3466 glib2.0_2.58.3-2+deb10u2.dsc c4c01644ec784f6b138441d2f8efbfe606d3a3154109d517bf6d8e89e150c57f 93604 glib2.0_2.58.3-2+deb10u2.debian.tar.xz 4ad27e8c435a4b7b7ec01be16c49ec277d9011b9060eea6a1f3f3c3fec851a64 8280 glib2.0_2.58.3-2+deb10u2_source.buildinfo Files: a660838c985e2eb23c2d26edff709b15 3466 libs optional glib2.0_2.58.3-2+deb10u2.dsc cdc77b1b87bf26a9113eccd5197c76a3 93604 libs optional glib2.0_2.58.3-2+deb10u2.debian.tar.xz 678c1a794258634d95c8e4c824af6522 8280 libs optional glib2.0_2.58.3-2+deb10u2_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl3GoukQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMTxldEACU4xlNAYw7F9th6F2MLMeHCrJjnVLcgSjA f/00v9+9cRT4Izp79b2339/M0dOmSgYCrK6K5WFZTlZuExJMj7r6KQECL2z3be8R Fxq87Dbw+9bBvyNslKr/uPs1JUykBtCmIVgUBRB6ZhQGOoWpGYA86Tq1Uh5LQFuO Qah5kTwoc32AOiH48YXkn+Jx6Yn1dYkgfXjWo15hGxJu6aKZuicnVZYb4ri4oUcN ETSkXdSPnOlq4/QmWo4cVzlVenZw9Lwr5aOD61UujY6aFg6Yj+jl+AeX79uhaJgw fmzIg5DsQbyfot3EJlzIy+BlabuF5Ey+t8m5s5NCwM7YqDbTuW7DE+PIcP5u+az1 EBa11AYK9lfrhrf0KapmFgGpif/gresjOlue0z4qDUGW5AiR92Tzn2m78uH0Fo6g LJ3vbo58wIPl7F27tXKJjkDE1U2pyFcQd1MEi55Kg3jUqeoFlsMXPpAX967jl8iO Jz14ZzEuSK0RQpbC4C445G5+7R/8b+FQBfyBlFJYaWkCj+M8oHX7J7oNmxVrdMiA d9672dcw4oFZPPZanpJdh7h4anunl489sYatUULat7jU/5Dp/wGpZ832E7NGmdwe qJzI/xAqEFiJQQV4VsgcxIOflWEsC+ZdLn31Vb+mt8Zp+wJEzhqvxWZLzzZfxUE/ 29MnEuQyQw== =7gUf -END PGP SIGNATURE-
Accepted mutter 3.30.2-9~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 18 Aug 2019 19:51:33 +0100 Source: mutter Architecture: source Version: 3.30.2-9~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 932428 932767 932781 Changes: mutter (3.30.2-9~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 * d/gbp.conf: Set packaging branch to debian/buster . mutter (3.30.2-9) unstable; urgency=medium . * Team upload * d/libmutter-3-0.bug-control: Include GL drivers in bug reports * d/p/renderer-native-Fix-EGLSurface-destruction-order.patch: Fix attribution * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch: Add bug references for #932428, #932767 and #932781, and retroactively mark them as closed by this patch in the previous changelog entry, based on feedback from bug reporters . mutter (3.30.2-8) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch at 3.30.2-42-g2a81dc45e - d/p/clutter-x11-Consider-remapped-keys-when-guessing-the-keyc.patch: Fix repeated inputs from extended characters (long-press) in on-screen keyboard - d/p/compositor-Destroy-window-actors-list-on-destruction.patch, d/p/window-actor-Set-actor-as-compositor-private-in-window-be.patch, d/p/surface-actor-x11-Assign-X11-Display-only-if-we-have-reso.patch, d/p/surface-actor-x11-Bind-the-surface-actor-resources-to-win.patch, Fix intermittent crashes on exit/reload - d/p/compositor-Disconnect-from-stage-signals-on-destruction.patch: Fix stuck windows if an application stops responding and one of its windows gets unmanaged - d/p/clutter-x11-Implement-keycode-remap-to-keysyms-on-virtual.patch: Fix missing inputs from extended characters (long-press) in on-screen keyboard - d/p/cursor-renderer-native-Free-MetaCursorNativePrivate-struc.patch: Fix a small memory leak - d/p/wayland-seat-Use-g_free-to-cleanup-MetaWaylandSeat.patch: Fix an incorrect free-function that could lead to memory corruption - d/p/cogl-pipeline-Don-t-try-to-access-to-free-d-pointer-data.patch: Fix use-after-free - d/p/renderer-native-add-missing-eglTerminate-in-EGLDevice-err.patch: Avoid reusing an amdgpu display connection if EGL is missing the desired extensions - d/p/workspace-Focus-only-ancestors-that-are-focusable.patch, d/p/window-x11-Focus-the-default-window-with-delay-while-wait.patch, d/p/window-x11-Add-lost-definition-for-TAKE_FOCUS_FALLBACK_DE.patch, d/p/window-x11-Focus-a-window-in-the-active-workspace-as-take.patch, d/p/window-x11-Remove-double-definition-of-MetaStack.patch: Fix crashes involving window focus with some applications, notably JetBrains IDE - d/p/window-Emit-an-error-and-return-when-trying-to-activate-a.patch: Fix crashes when an unmanaged window is activated - d/p/window-x11-Don-t-double-check-for-unmanaging-windows.patch, d/p/window-x11-Accept-any-focusable-window-as-fallback-focus.patch, d/p/stack-Add-a-function-to-get-a-sorted-list-of-focus-candid.patch, d/p/window-x11-Use-any-focusable-window-as-fallback-delayed-f.patch: Fix hang when windows take focus but do not accept input - d/p/Updated-Spanish-translation.patch: Update translations - d/p/tests-Add-accept_focus-command-to-runner-and-client.patch, d/p/tests-Add-can_take_focus-command-to-runner-and-client.patch, d/p/tests-stacking-Add-tests-with-no-input-and-no-take-focus-.patch, d/p/test-runner-Add-assert_focused-command.patch, d/p/tests-Verify-focused-window-in-closed-transient-tests.patch, d/p/test-runner-Add-sleep-command.patch, d/p/test-runner-Add-dispatch-command.patch, d/p/Makefile-tests-Fix-paths-for-stacking-metatests.patch, d/p/test-client-Add-x11-events-GSource-handler.patch, d/p/tests-Add-accept_take_focus-command.patch: Improve test coverage related to the above bug fixes * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch: Backport patch from 3.32.1 to fix use-after-free in Wayland monitor management (Closes: #932428, #932767, #932781) * d/libmutter-3-0.symbols: Add meta_stack_get_default_focus_candidates(), which is added by a patch * d/gbp.conf: Set branch to debian/unstable * d/p/renderer-native-Use-g_set_error-instead-of-_cogl_set_erro.patch, d/p/renderer-native-Make-sure-we-re-not-destroying-an-active-.patch, d/p/renderer-native-Fix-EGLSurface-destruction-order.patch: Backport patches from upstream gnome-3-32 branch to fix another use-after-free crash that can be triggered by suspend/resume Checksums-Sha1: 0b89b443e1b96fbc49e541d520fa2a1252aeac81 3479 mutter_3.30.2-9~deb10u1.dsc
Accepted flatpak 1.2.5-0+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 23 Sep 2019 08:44:18 +0100 Source: flatpak Architecture: source Version: 1.2.5-0+deb10u1 Distribution: buster Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Changes: flatpak (1.2.5-0+deb10u1) buster; urgency=medium . * New upstream stable release - Allow runtimes (not just apps) to use extra_data, which is required by the new org.freedesktop.Platform.openh264 extension - Support apps that specify several required Flatpak versions, such as 1.4.2;1.2.5; for runtimes that require the above feature - Backport some crash bug fixes from 1.4.x - Fix installation of bundles - Set looser permissions on the /run/host/monitor directory, to work better with tools like Fedora Toolbox on the host system - Do not wrongly remove extensions as "unused" if they are referenced by the 'versions' extension key rather than by 'version' * d/gbp.conf: Use debian/buster packaging branch * d/watch: Only look for 1.2.x releases Checksums-Sha1: 29473142b2c715dd618f595f856a80a3241b56e9 3507 flatpak_1.2.5-0+deb10u1.dsc 72191b50fb419c43c1d50991730cd8cdeebe1809 1169144 flatpak_1.2.5.orig.tar.xz 233fec2644523cd4387285c71fa0b0f1c7861353 25288 flatpak_1.2.5-0+deb10u1.debian.tar.xz 7fd789202da2d0c93278fc7e5c7fd112304e92b1 12296 flatpak_1.2.5-0+deb10u1_source.buildinfo Checksums-Sha256: 85d23beef455b3cb6d50b164186da2822ef9bb3f12ac63792d534a03a3b02a46 3507 flatpak_1.2.5-0+deb10u1.dsc c71b36bf0141cb3e0b4c3e024c81b62a58a3d1e17e7a53a60171372b450e4290 1169144 flatpak_1.2.5.orig.tar.xz 7f33dfb92c4c3e3ea551d3d7213fd720b7e2da94d702ecf8ea36e27ee3d698f3 25288 flatpak_1.2.5-0+deb10u1.debian.tar.xz d625df97678c2216b114ab91d83604d12cc7b0ee10d35f22da2b2274d5684fb9 12296 flatpak_1.2.5-0+deb10u1_source.buildinfo Files: c919beb29284280df352ea7ce7fc6e92 3507 admin optional flatpak_1.2.5-0+deb10u1.dsc b7e0b74155b9efdc20beee609470ebab 1169144 admin optional flatpak_1.2.5.orig.tar.xz 04a594f0539ea2c31a893b366c0bc4cb 25288 admin optional flatpak_1.2.5-0+deb10u1.debian.tar.xz 1e40f3bb65edcce87b0755f4b6125620 12296 admin optional flatpak_1.2.5-0+deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl2IjEwQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMTzAFEACsct2Hv4B3NohASF+docDPa4awBLmO+8ah 45XXaeu/xmyS1vnNJKFgO3VrPVQjI+kri6PVD6Vj3zT22Lgu4IUro36Rbq88Flar sFs5nrcm2cmA3+lt/AfbUfIVGqKTTaJK8wMlS8Bg7qRafkjRGeVMUCQLbWh64onu RjXxJnvgvufytuf44+CmiZar4MRDmuQwJkY5KVU6yEngKf3vI8KEvHnHOpAdvISQ Lr5TZ7S7gHT2Q6uE5z9GWetdvIqccgUK833+1NHvzlJbRpj+oyQ+rrM14WgUQuop LBVX8JIJ7fc1F32i4mcgBFZv5mAIkOjM5/7UOnZtBjgSb9wnvaAcb3pQFqRmhtku een1rj8ags6DmEJuUJ7yUeZjb8g461JcSo8rJho1nCUvI/zxmZq6W2wyK4SZArJI GRBoGFkfeJUMrRs6IPZJW70hiEohSVpUFO30StPDKaXFvPcu7F0wYvxsl+92et7W 3u1gaPgU1cSiOniZ9VCyn16/Vb+5Hht2YEgSefAnc/PQKuRCPVgmpMctaZ4Vl4pL V4vjJDhtYzdTytsTRa8O+Z2Rha1jJOMk1BLKTuBRryZ/m6nVZtnHJL9d5B4PwpSx XK1pk1ZWtsz8W92XoxNOr7pCUQ9rNVId5230VQ2EH77P2uyQtWNjK2Ss4YdGuZeC 6rmfODjSzg== =0Hin -END PGP SIGNATURE-
Accepted gnome-shell 3.30.2-11~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 18 Aug 2019 19:50:59 +0100 Source: gnome-shell Architecture: source Version: 3.30.2-11~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Changes: gnome-shell (3.30.2-11~deb10u1) buster; urgency=medium . * Team upload * Recompile for Debian 10 * d/gbp.conf: Change packaging branch to debian/buster . gnome-shell (3.30.2-11) unstable; urgency=medium . * Team upload * d/gnome-shell.bug-control: Include related packages in bug reports . gnome-shell (3.30.2-10) unstable; urgency=medium . * Team upload * Update to upstream gnome-3-30 branch, commit 3.30.2-22-gd41669189 - d/p/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch: Fix truncation of long messages in Shell-modal dialogs (LP: #1809788) - d/p/osk-layouts-Fix-French-layout.patch: Update metadata to reflect upstream backport (no functional changes) - d/p/boxpointer-Unset-the-sourceActor-on-destruction.patch: Avoid crash on reallocation of dead actors (LP: #1831555) Checksums-Sha1: 34ad2361bb821c67be64644cecb14acb98b485c4 3536 gnome-shell_3.30.2-11~deb10u1.dsc 7b85a565b069291615d12fbfb02c9177a9a06410 72952 gnome-shell_3.30.2-11~deb10u1.debian.tar.xz 3c635348f2a7721d44648c23fa89c114b5826d7b 19232 gnome-shell_3.30.2-11~deb10u1_source.buildinfo Checksums-Sha256: 710b68419cfd0d5168de2d402a4ff11684678abdf4a00a627fc122107074c030 3536 gnome-shell_3.30.2-11~deb10u1.dsc 4ffb04a7af69b883a7e436f3ea067416b29d4af4b58971a2a303b84851f43a09 72952 gnome-shell_3.30.2-11~deb10u1.debian.tar.xz 033445d79ffaaff7d82d7d767f33ff098c8e34a94d6da68cbaa61a7038e658fe 19232 gnome-shell_3.30.2-11~deb10u1_source.buildinfo Files: 8cdd0221a0d4bd649dffcd3ec1b84d6b 3536 gnome optional gnome-shell_3.30.2-11~deb10u1.dsc 105f09f7bfe5723753b1c8d47bbc3967 72952 gnome optional gnome-shell_3.30.2-11~deb10u1.debian.tar.xz 3f90798cc5d825752dba543d72ca66ba 19232 gnome optional gnome-shell_3.30.2-11~deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl2H+kUQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMTyORD/45i/EepdCYzkMK0OdXGYW400BJ44bg8fQH JeGAzcIrBW1xpXmqGYATR/nE1kCMrqoNbLjk3juaV40W0+31+ctjeSeZyq6GltUe E8FwE+x7ho990L7edMXcRmyAvagoca419MAJIsU9Mu0IoK7V1oSb/2SZZxLMZikB gz3GAMHdWqobRcV1f3OzzF91JjeHTLrG2yUBrlpGTpi2KeCswQ+jlsibdH8i3ULG R7r7zdHdTEWjhtQiZxYVj0mGlUXfXQssO7lu8tdUq6q0nH9U9awDI7qsWJ1lXn3b /OHF3KuUzGXZ9x0eIDfv8eyd7+lCzozZF4EtPmenhQwcr6ip3eokj0SPH4GGWpCd LQrMi1my6jxVh0Oo4iUfoDSNz9u+ukaorGKRR5zP6VGdDbRihOeqLgbNsMj34prQ w0+eXa/6uzAAsjwng5D8mU5FxYJrNSYejzg8QVdIAMfP+9aLLC9HZ/yKJVGppz8w 8ZX/Qth4PigbHAjc9q/F5lwz/XriF/JhJvzsnyqVKyOBrh3HI3wQFad0H6Ffsk/I SSkNaGfJPjBis3GeaS9oktyYp/JcslcWVfDF84V22WLbkhKvc4SFSgkrOf+oK0NR VYeRlU4e1C4tLeE/8iFNjoXza4RjPOw/5ZEv+7pCsGdhsqXIGVo+AtRljxNCWfRE 1rgDQVAZaw== =DCxT -END PGP SIGNATURE-
Accepted gnome-sound-recorder 3.28.2-2~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 08 Sep 2019 11:36:53 +0100 Source: gnome-sound-recorder Architecture: source Version: 3.28.2-2~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Changes: gnome-sound-recorder (3.28.2-2~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 - d/gbp.conf: Set packaging branch to debian/buster Checksums-Sha1: a0e586383c21da6c9f8a907ff660eff83411fe26 2624 gnome-sound-recorder_3.28.2-2~deb10u1.dsc 8f71ac4ab011350f38a6ed41d5e3d368b8709cb4 5088 gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz 8622bad0fd2178498cbf6b9583c72203de78dbf4 15786 gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo Checksums-Sha256: 08dd59a02d22edb777566a9e1739d56ef5b0478055164589ee5601c592ed0c9f 2624 gnome-sound-recorder_3.28.2-2~deb10u1.dsc 622604dea00f2c5038e50198b3fa1c9e5c6944f550b56ccda228e537ee1d3521 5088 gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz c048f30102b886600cdcfc90cd82e3706f13fe26196c00098334e14d0817e1fb 15786 gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo Files: 09cd40f6e716f06af973ab1c69cc2ee3 2624 gnome optional gnome-sound-recorder_3.28.2-2~deb10u1.dsc 919d2b4349f6c30a909a457ecce90cf5 5088 gnome optional gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz d66e764aae02c253b4457990eb7c0723 15786 gnome optional gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl11CBkQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT+EwD/9Mb/8fA8IhVBzGx/OgGlT1/Zc7tbTiDOL6 BIMWTHBxUoyk5s8bOzVnssB7KV+xW0pnXK0oKqBguFYe0P75UNz+FlV0sMvtW1Bx BrXY1VviaFdcrQB+UihWF7HJ8pKiDfVqYaFDb7FLum2gqriDBzJ7TKZRqwuY6+tu YTTnR46i+qFEymrfbhk5iExRSa+GVHTt1Lc0XS6oHJo/4H2Qu/NL647NLwpwoITV hbA+tmdBgPJ1Dr3mhiMuHooeKFGYxURKyqqq9rKv7gbTV9qs971bid92pzejM/kd kDLPpsGg9/jAvYeHN0dOk26k7apSGwpXeroLWjFomSx44D4vpFxwLeOZ87OPbDSo 43oqC+pRBZ1jFWTTo9J/53mdazQmCMKxkZSvOdB89pholnTvNHTFQ6rVIlRqkwcJ ToCJ6E8slTeMMEnVr55qKYCa7Hi6Depd5Mt5Nky6XwUCPoIkqW5YN4BoFggAU0DP j35WurYj3DiWbuOdnnRnj4qRufnzMlmh0Yd0sSZ1P/7GcFzi3PlsAdepuuHAq16P esiwmWw4N79Dmc0/iwy4M8Uu4FxoNsycQi2ePAd0n8e+4j+8nigfhOiEHqPcWTgy zYlXXqdX1WNDqDGjF6HKjiQsPUhoXOFjyGF6cRJQoP37da5qXGcEVVw4N8DWOmoF hd1k2OnwFw== =Hd3V -END PGP SIGNATURE-
Accepted epiphany-browser 3.32.1.2-3~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 30 Aug 2019 22:39:13 +0100 Source: epiphany-browser Architecture: source Version: 3.32.1.2-3~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 927731 Changes: epiphany-browser (3.32.1.2-3~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 - d/gbp.conf: Set packaging branch to debian/buster . epiphany-browser (3.32.1.2-3) unstable; urgency=medium . * Team upload * d/gbp.conf: Set packaging branch to debian/unstable and upstream branch to upstream/3.32.x * d/p/lib-Give-libephymisc-a-RUNPATH-pointing-for-our-private-l.patch: Ensure that the web extension loads our bundled copy of libdazzle, even though it only depends on libdazzle transitively via libephymisc. Thanks to Carlos Alberto Lopez Perez for clarifying precisely which component was failing to load. (Closes: #927731) Checksums-Sha1: 87a232b55516f5e183bf0cb3c76e451c3e462f6b 3006 epiphany-browser_3.32.1.2-3~deb10u1.dsc fdabe6f7bda82a802b214120920fead7c9523834 78104 epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz 4e26015d6e1f449bf72a243f2ec29cd545ea5edd 17517 epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo Checksums-Sha256: d9bc3e803f180e1ba4a3277f5b36d85a303fcc0ca06d4517dd123581b8292c5e 3006 epiphany-browser_3.32.1.2-3~deb10u1.dsc 5966b1190bbb9a294ac73d95feee3522a70996b1dd71997bf9f58aba3d2c35ac 78104 epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz 8b303fc00c8d96388bf05371b55a99156f0cb572ea2ca41121b0058f6f2aad29 17517 epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo Files: 3ce4a8f0312e5e3f4c8a1721fb38e961 3006 gnome optional epiphany-browser_3.32.1.2-3~deb10u1.dsc 8908169ceeddeae6312a4644f4dabc06 78104 gnome optional epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz 705c4e5c0c292adf193452cfa6bd93cb 17517 gnome optional epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1qPp0QHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT4v2D/0fXQkz5tStlihc06UBYuZlq2KnIWc+rFQ1 MAmbZJZIHcVePSI2mxPynVYpXC6L6k3YQ4MAaDByrCBMzRnVD0RyhQ6j8EowDjLO zn1XZ/Qy7ofoXhY2dhL/fKollO33LM8pdMq6RBKr5pBEALTcUmAXQnCh0VTPkzDv /SduqMw0E9xIfsxu+gupd/pqxe6eaQsYx87qBaPkuEjEJhNfR7z6emxM0YNCLJfR kEHbgKAuO51ex4sBMOMe3Dhl7OQTwgvELjL06YAs+eCwS1h+1SrVsRAp97PZL4RJ rT9WAFGvlgFz2uO5d8yYKiErgWiIQ2FCr8hxUNyu4Z4eaRzEuFcppp/Yp0rBbAcm Jv0av9t5Uoyg3tcDGu/ayQOVG6k6r0NT/XOWW6LQFKpdGZvAGzSjWKg+CeoC31jK 0llYyYyBDrHKmsTTtJp1wzDkGV+nUOU4Qqj4tcEXxlWYuJ9ZGjw0NO4arbziQ0Y+ xp5r/eMcIRyGcI/SGGfwJYCkUgbMZzFQ/eYXFDeMwTL6qvxihNrJ7xwpwj48KNjL 7o+vI0ESXKI8a/45/L+xgEfhMpJmBteeGAmaZfjl5FuqVBThDCmn5MVjsP9+1cDT nGKPmbFXTlhMQnHwC1+g7y6ffD47OF74cmvi5pZZPlF7yMH/FbfoX/0+a7Ga45JF 4/kobEPBQw== =P8Tm -END PGP SIGNATURE-
Accepted gnome-bluetooth 3.28.2-4~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 26 Aug 2019 11:11:19 +0100 Source: gnome-bluetooth Architecture: source Version: 3.28.2-4~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 932405 Changes: gnome-bluetooth (3.28.2-4~deb10u1) buster; urgency=medium . * Team upload * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch: Mark as applied upstream for 3.33.91 * d/gbp.conf: Set packaging branch to debian/buster * Rebuild for buster . gnome-bluetooth (3.28.2-4) unstable; urgency=medium . * Team upload * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch: Add proposed patch to avoid GNOME Shell crashes when gnome-shell-extension-bluetooth-quick-connect is used (Closes: #932405) * d/gbp.conf: Set Debian branch to debian/unstable Checksums-Sha1: f4ffc842b11962f09fbd0e95f450797b02d51b50 2706 gnome-bluetooth_3.28.2-4~deb10u1.dsc 07f3297d58599a9aec83dfaf71b171c8d063987a 11524 gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz afff3c473a82719c772e63b9291597cbd137969b 14952 gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo Checksums-Sha256: 8590d321ca0bc6c9aa04868cc23d358a67224a36159d29aac5026caf0f409024 2706 gnome-bluetooth_3.28.2-4~deb10u1.dsc 7c24eaf4024eb4a26775fc85f01e991d1966654db1448df91a33da496c3e7124 11524 gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz 90b265d39d1b77d57117dca23fb6524433dbd99220883988b1adf2394c8ada4c 14952 gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo Files: bd242112aa97a3de2f46806029d7eaa1 2706 gnome optional gnome-bluetooth_3.28.2-4~deb10u1.dsc 8e7714f3c670404340a3a7afaf5c3ff6 11524 gnome optional gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz e91973f1eedf5d39e5bd75e810bb1de1 14952 gnome optional gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1oOi4QHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMTxJLD/4z5UiOztbW7GSpopaJqJ/xBAwi8gBpZXLX U1xJhNvwBybIjE8H+EtGwC6NBihR3mrqgLuSclFN8dwDxfUCd7XbEwF/qsZDGHkb Xx9A2JOJ3BKtjST+VfY5kNpZipeDFYDgkTn6RfdE+WMSIOvuXL1a00sxZhzYLljG yqYQGkPogiodgbL7Bc+fiZRTF8kejQQBLRJggv6n3UwL7EG+aYh3yPwk1ZbhaVSW j/IqfD18DtUB1Q7N/cEybNmQZBKUms9HVF5o4I9gUB6+BBwXQGt9XVqxwO6XXAyO azFFiTUkqsOd8Vc8wakUske8+/UXSCU/7+W5XfZlrP1EWIOOCTiTvi2z+rrcoI2Q XoiEltRvNs4Lmhkx/Pd38tAkNsHxLA6GiRiT9ctG51PNn2y7xtspT63oEnyaNPPU Fm4OZlNii7uPmKEE87OBe5F0KYfS0YeF4aYxpF/agJYKndoiTGofQeTPsClXm3mK 2c+CzEB8HX/bVDupujHyQRoVPxyMYOEA5uPIGxXX3Cg4C3h79BMSozgsdmuryvTh JFQsJIdC6cHBwUW+xB+OmxmjqlxTW8nxUWG/r7NXmispVEmgMQmt5Wqauf9aOz0q m40ZLdGeaRaIO5OQq0hTVcGuTLUssWBYyQajoP33fErpmIP7xGLZHpTHqzGVTdiA B8irsBJ+oQ== =q2qz -END PGP SIGNATURE-
Accepted gnome-control-center 1:3.30.3-2~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 21 Aug 2019 08:56:24 +0100 Source: gnome-control-center Architecture: source Version: 1:3.30.3-2~deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 933529 Changes: gnome-control-center (1:3.30.3-2~deb10u1) buster; urgency=medium . * Team upload * Rebuild for Debian 10 * d/gbp.conf: Set packaging branch to debian/buster . gnome-control-center (1:3.30.3-2) unstable; urgency=medium . * Team upload * d/patches: Mark more patches as forwarded upstream * d/patches: Sort non-upstreamable patches to end of patch series * d/patches: Update to upstream gnome-3-30 commit 3.30.3-7-gf41ae4269 - d/p/info-Fix-crashes-when-retrieving-disk-size.patch: Fix crash when the Details -> Overview (info-overview) panel is selected (Closes: #933529) - d/p/universal-access-Fix-duplicate-settings-call.patch, d/p/universal-access-Fix-leaks-checking-settings.patch: Fix memory leaks in Universal Access panel - d/p/universal-access-Don-t-use-widget-names-for-GSettings-key.patch: Fix a regression that caused the Universal Access -> Zoom mouse tracking options to have no effect - Update translations: is, ja * d/gbp.conf: Set branch to debian/unstable Checksums-Sha1: 2dba65a0c6aacbbb66a34d0ad99a01395e339639 3520 gnome-control-center_3.30.3-2~deb10u1.dsc 49a77d950635386d7e5c74fd0cc0b6c17441a163 97808 gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz 4b6cd5e3a05f7853ca1a0b6391e070f63379b11e 24560 gnome-control-center_3.30.3-2~deb10u1_source.buildinfo Checksums-Sha256: 637ef14a5c5a39bb0ca59966eaf9097e01c5ce00c9ab4893b865a4ea6f02b378 3520 gnome-control-center_3.30.3-2~deb10u1.dsc 9b3aacbf556ebcadaeb28df67d5d636d47baefd68237f2b2344c89e5ee57959b 97808 gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz db0915de7719a09ac6f3a27d5932a2f67c475866c515265a6234181e16f67858 24560 gnome-control-center_3.30.3-2~deb10u1_source.buildinfo Files: edb43230bb90f034ead05fda0e3b08ae 3520 gnome optional gnome-control-center_3.30.3-2~deb10u1.dsc d8f943ffd218bf88911bf1075a1c0018 97808 gnome optional gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz 031a8bc89810b29f597f515fd3681bf0 24560 gnome optional gnome-control-center_3.30.3-2~deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1fDycACgkQ4FrhR4+B TE8yjQ/+NZpF9RBBHyKUWm1FOPrCpEKzOiesvb36MksXJU6aQzDVkIlTvtGNzPQ5 rZxgaz8jK+t8vmOZvtDicxFua/67OUCGEdsAyPqWcSesCblHK94TCIyJfQpsvCTX buItNBsX3hkhvcgvYBG9G+bbv+gCS2wfoQNE/JC5e5bvNjCnjo7ntiRdr/CAvwox UdEgGbw/a//d/vHwlSWKNn6/+DwbrXXXRr67O9za0gyqjvSG0z1tXfzZBWSrgYkd 0pQGyQVTxiSr7f9Ez0sOnD5s0qSNSQVmLYgBae8OFNl2ukYUS/j51qckPkFq9XiV vKNsQtb3O84aC4IKpNf/ZwQVIWbQqRpAXqolR4VZ9YWIyOnb8dCvxOJJm9Rs0B5d CfZA1jzf4BnatJkw3NP1EzpueTw90fkIUJv/ALJQeeebgNEf9OKEnDRU9jm2b0yk 6uTtacLSnsw5v4sG98q6fLPIYiQAuhNxn+Z1tMz2XeeJPNFgzhO4YvCdQRb3zbd7 qt7m4n973lAL6Wmb6mmU6Yz1xRNyiz7G6AOH7JzhhaSBUgxhlNOFOtBsMl3BHcaP ZSZfglPpDLtE9gXvsMEcIjfBV6nfEnVgucycQYuM5b29+018boazq3fhzjdbV/Wi fAUZut9BY71X7yrMFDHkKglRv6pSKzZ0K5z2gMlIa9RNdhqvceU= =YKjV -END PGP SIGNATURE-
Accepted glib2.0 2.50.3-2+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 13 Aug 2019 10:46:20 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-tests libglib2.0-udeb libglib2.0-bin libglib2.0-dev libglib2.0-0-dbg libglib2.0-data libglib2.0-doc libgio-fam Architecture: source Version: 2.50.3-2+deb9u1 Distribution: stretch Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Description: libgio-fam - GLib Input, Output and Streaming Library (fam module) libglib2.0-0 - GLib library of C routines libglib2.0-0-dbg - Debugging symbols for the GLib libraries libglib2.0-bin - Programs for the GLib library libglib2.0-data - Common files for GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-doc - Documentation files for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 929753 931234 Changes: glib2.0 (2.50.3-2+deb9u1) stretch; urgency=medium . * Team upload * d/gbp.conf: Add GNOME team configuration * d/p/gfile-Limit-access-to-files-when-copying.patch: When copying files, give the temporary partial copy of the file suitably restrictive permissions (Closes: #929753; CVE-2019-12450) * d/p/keyfile-settings-Use-tighter-permissions.patch: Create directory and file with restrictive permissions when using the GKeyfileSettingsBackend. Mitigation: in this version of GLib, the GKeyfileSettingsBackend can only be used explicitly by code, and is never selected automatically. (Closes: #931234; CVE-2019-13012) * d/p/gmarkup-Fix-unvalidated-UTF-8-read-in-markup-parsing-erro.patch, d/p/gmarkup-Avoid-reading-off-the-end-of-a-buffer-when-non-nu.patch: Avoid buffer read overrun when formatting error messages for invalid UTF-8 in GMarkup (CVE-2018-16429) * d/p/gmarkup-Fix-crash-in-error-handling-path-for-closing-elem.patch: Avoid NULL dereference when parsing invalid GMarkup with a malformed closing tag not paired with an opening tag (CVE-2018-16429) Checksums-Sha1: 3e5b3232675ca069efc46ae9b77fb5b400018d0c 3451 glib2.0_2.50.3-2+deb9u1.dsc 38921822069c760ce1c33c3149bccba85b4dd617 74472 glib2.0_2.50.3-2+deb9u1.debian.tar.xz bf82692a5f402b317d78c4caf09e7f1e75f4b225 8351 glib2.0_2.50.3-2+deb9u1_source.buildinfo Checksums-Sha256: 1ec772f446253b189271f35106e39aa84a74a57796c9b1d09f3fe4b6f608c1bb 3451 glib2.0_2.50.3-2+deb9u1.dsc 305398721ed8c790b677e44850228fd04efd1b9da7181bb0eedd9822ad7ff5d7 74472 glib2.0_2.50.3-2+deb9u1.debian.tar.xz 839929c489ef87be82d541629a5db6ea1dac906b730ff8da2ffcb2c8247c05fe 8351 glib2.0_2.50.3-2+deb9u1_source.buildinfo Files: 14c3dfb0b47583e8cd5eec5dd9deea7e 3451 libs optional glib2.0_2.50.3-2+deb9u1.dsc de5bf0d8a60c964623e45a307f51f7be 74472 libs optional glib2.0_2.50.3-2+deb9u1.debian.tar.xz 370e1f749acbbb8173e9a4621532bd6c 8351 libs optional glib2.0_2.50.3-2+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1WW6oQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT9nQD/4vxpymXdXam6vYEMJcJft7vXCgxI4aXsmJ pj/HjvR1S8dNnQ/WzwO7tz2CKQOUifnE55VpL1qjO/iovD08g3B1k9smk/7qO07w Mg5uDTfRnCtXJ+ImpxKO5I8RTDvbx8bn+Iv9n1Xgn1vfslmUQsmuHfS3/XpBtuUq m0TicpsUVngd5EC3ENaH28Xi0zbsiFuxf09lK1VPoKh11PaqoR7X20CO9dV6bdxc i+AaZrfGmX8/kkR50vB+U+IZwpu+yKcL+Vfq//Cma0s2swUQPircT4LnaDrsQMIc /L0GP9gDPSWwaEeb6kePX1si7i4swaYAMDkRsvbiVMRV0gEAeucFO603C+f+K2+y nKbZpK81yu1hwfHu2L+LyaELQpYDc6/mM+4szNzvkqggxTbzyYQhaiCBc4z72RxF nsJy6BZptD47cblkMU7RGnT2hHfYuTYOSoBJegZBBkdTYY6Dd4l6YT485+dtSzd/ Ayybp6Ws7Dglc7bjca9K9656RWt4PXiVUuokIkUolNQr/f99b3e8jjjOL1cdK6d/ JL9MFGdlNwrWbZFbiSNWYletB/W6US155PghaEqMS8/DPwyN8YH2HPjRgCN5OkI4 fSpChiPwsY7eWRRqSEVVw2zEtk81nR9llDW/l0odmA1RRKiFvfh+LtBxRblGAR7H Al5jui5W2g== =K3YH -END PGP SIGNATURE-
Accepted glib2.0 2.58.3-2+deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 30 Jul 2019 10:41:51 +0100 Source: glib2.0 Architecture: source Version: 2.58.3-2+deb10u1 Distribution: buster Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 931234 Changes: glib2.0 (2.58.3-2+deb10u1) buster; urgency=medium . * Team upload * d/p/keyfile-settings-Use-tighter-permissions.patch: Backport patch from upstream 2.60.0 so that the GKeyFile settings backend creates ~/.config and configuration files with restrictive permissions (Closes: #931234, CVE-2019-13012) * d/gbp.conf: Swap branch to debian/buster Checksums-Sha1: c3e61629e400062b8bdc9c54f8538f75f0af5fc2 3422 glib2.0_2.58.3-2+deb10u1.dsc 9b7d6d2477ee18e12b3723094855b2e5edf4f127 86012 glib2.0_2.58.3-2+deb10u1.debian.tar.xz 0daf89914eabb3745219b39a6dd407ceaa6b2db2 8130 glib2.0_2.58.3-2+deb10u1_source.buildinfo Checksums-Sha256: a1bcfcce21ce7cd6b4bae65c2fee5291a72a38ceab8b9bfe0d120f92755725e2 3422 glib2.0_2.58.3-2+deb10u1.dsc bc2a0a7f00953e573d38a7d5aec92acf3e7822726f53b8c301e88a07dfc0cffa 86012 glib2.0_2.58.3-2+deb10u1.debian.tar.xz 0635ea59c357b244890986f091527e1f26584e18aa90b9c95b08eba1d1eea34d 8130 glib2.0_2.58.3-2+deb10u1_source.buildinfo Files: 6e18615dba51886df563e39b001d747e 3422 libs optional glib2.0_2.58.3-2+deb10u1.dsc 9782e76614cee5b9a9a726f5cc0c4f7e 86012 libs optional glib2.0_2.58.3-2+deb10u1.debian.tar.xz 9b36254f093ba3e8d072dc83ce77acfa 8130 libs optional glib2.0_2.58.3-2+deb10u1_source.buildinfo -BEGIN PGP SIGNATURE- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1H2JUQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT/yPD/oCKpbeF8hgHkDxFJnCOA8e+VggEZUxiJW6 xpHsJynEY3IYoOWAonlvtJ4hJZgLlXxnT6JT8zIb8Q2FKDFrgjK9Qcw5aSQ8NBu5 gtHyDI6RBG++Mu3UfU+A86UFAloIrw6ZQEY2UTMKY3fZcs4cbN1nM3k9ijeIZhIA IyzwAdnXhpYhc4chzzSh8OIZ1gMl1iPuaICJH2dn8bYz9UwXBN69wabstdF7pz+K AiS/ENqPSHDve9gWZZJfEvW2a8uwkaUvCkzKvU+en+l9PdSSMEqg9cV20/Zc+XlZ Nm1ihPRy5dtCVkj1OIyZ+NFK8X3w68KIfPS9aT6ucEYUxjXKzRT1U2oFv5Sw7qcK eyPZa0O3j06zFrLiCrD2/grDVTHGHSuwxiXkwqQuJaFzxgelTl+B444b10nvKiRl Zy+eMHi079Wd6kz6MdVCV0MALzjuoLR4LMDUox7qJfvyQtZ4IOXsPKDAZGwEgcl9 7SKbwyRonxuLM8Cr8gZ1mDEi8ca3qIciUz1uInzi0SUSJVtLFUMv3wxWfzMLbLgU JmtD05cyCdvjDOwmSydhN7PWr8C3vBFKLxLq0zUKxePmHDlMGjZetV17mx+N73vA suGc2X8BygfgiE53HnE13Lt7CUCcTVUigm9qFM8DhqqLKpEo+kRFwy8O9q02R+qf v//k2paqPg== =vk7g -END PGP SIGNATURE-
Accepted pango1.0 1.42.4-7~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 11 Aug 2019 12:14:09 BST Source: pango1.0 Architecture: source Version: 1.42.4-7~deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Closes: 933860 Changes: pango1.0 (1.42.4-7~deb10u1) buster-security; urgency=medium . * Team upload * Rebuild for buster-security * d/gbp.conf: Set upstream branch to upstream/1.42.x * d/gbp.conf: Set packaging branch to debian/buster . pango1.0 (1.42.4-7) unstable; urgency=medium . * Team upload * d/p/bidi-Be-safer-against-bad-input.patch: Fix heap overflow when acting on malformed UTF-8. (Closes: #933860; CVE-2019-1010238) Checksums-Sha256: 48cb653f7a82d8127192e71ca644544f94bac7f882565f40f74b5dbe74c3d00e 3301 pango1.0_1.42.4-7~deb10u1.dsc ceb9b2f2b01b8ab0f46f73078f04ea57805d8106de4369a13b507cba74034d6e 50480 pango1.0_1.42.4-7~deb10u1.debian.tar.xz abcfd798adc216a4922faf1ec962e2ba960e571b0aaa380396e21c45d017aa2e 9405 pango1.0_1.42.4-7~deb10u1_source.buildinfo 1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d 833876 pango1.0_1.42.4.orig.tar.xz Checksums-Sha1: 9d45bdb4ead3cd186963146b7de6f25362d7b22c 3301 pango1.0_1.42.4-7~deb10u1.dsc b1ba66ca8c892646fedb2466e2431f4e434487f5 50480 pango1.0_1.42.4-7~deb10u1.debian.tar.xz 3e80b72b12c5831c18761c426778551520320302 9405 pango1.0_1.42.4-7~deb10u1_source.buildinfo 240942b1307eaa3819e6e534596271c57cd75457 833876 pango1.0_1.42.4.orig.tar.xz Files: 22acf92534038c178d7c712fb61d3f59 3301 libs optional pango1.0_1.42.4-7~deb10u1.dsc dba269476a005296084ca3f56d8f4ab2 50480 libs optional pango1.0_1.42.4-7~deb10u1.debian.tar.xz f03b452a09c73cb159e47c44cd493e92 9405 libs optional pango1.0_1.42.4-7~deb10u1_source.buildinfo deb171a31a3ad76342d5195a1b5bbc7c 833876 libs optional pango1.0_1.42.4.orig.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl1P+IoACgkQ4FrhR4+B TE/Gfw//U8Ni4zLL1CuT91pzx8PXQCesCpzLDy1SqZp+iUsD0swbIrk8PV6iimGF jj+ttj15W5oDQbczvF3DkSmO0a51VX96y+ArF4cAdaXYJV7WySehFY5F0znv/Hta dcYq5CRImj3nA4qU5sp520ZWzfpdQzi98xjruEx1yfgXqQMlqzVFQGD63og6DjG7 517SZVlloGQMphWm2WBznTgcB/RTGb8Q0BUm4H2BrX2EN5F9OJjKlxn0Bf+myY+z hvX2knrxsanfRakGzxg1Oeba4XE4cNbXQmA0ymhBNZ3jcXpcEyZTa/gYvqdpDUQ3 Vgt8XmTPHloZjt4JpC0CveqQYl1bmx31cCR7uXKWckvxO8GiCh5xo6/7ETyzwGj8 fQr7d0yiIHUlRPOjBwhha88lWYZrW3669yWEatrje/woBZqWeBxSQ+830XTGaXs9 LAsCZZRfOJqp58fjdpc3JBZnsIgsKjFctDPxw+atV/8rRm5j6d3std9VMJCwCrcI ZEtghhuR0vnl/WaEL9t5NubTrrCcQWPOUIPJ7/nSKDMnB5m0fFNUI7plIEj5o6gx iPe0rxxXt7Hk8w/NW6muHzfq31lW872I1Nnn+q6Io4spGSxlr8HqnB7dz9fe8oPY gXwN+X8QjgyDmbYloBgb/fPAZ+Wpr9diD8TD79DYRRj4idmCHsA= =iYHx -END PGP SIGNATURE-
Accepted dbus 1.10.28-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 09 Jun 2019 22:42:06 +0100 Source: dbus Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev Architecture: source Version: 1.10.28-0+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-tests - simple interprocess messaging system (test infrastructure) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-user-session - simple interprocess messaging system (systemd --user integration) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.10.28-0+deb9u1) stretch-security; urgency=medium . * New upstream stable release - CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1 authentication for identities that differ from the user running the DBusServer. Previously, a local attacker could manipulate symbolic links in their own home directory to bypass authentication and connect to a DBusServer with elevated privileges. The standard system and session dbus-daemons in their default configuration were immune to this attack because they did not allow DBUS_COOKIE_SHA1, but third-party users of DBusServer such as Upstart could be vulnerable. - Prevent reading up to 3 bytes beyond the end of a truncated message. This could in principle be an information leak or denial of service on the system bus, but is not believed to be exploitable to crash the system bus or leak interesting information in practice. - Stop the dbus-daemon leaking memory (an error message) if delivering the message that triggered auto-activation is forbidden. This is technically a denial of service because the dbus-daemon will run out of memory eventually, but it's a very slow and noisy one, because all the rejected messages are also very likely to have been logged to the system log, and its scope is typically limited by the finite number of activatable services available. - Remove __attribute__((__malloc__)) attribute on dbus_realloc(), which does not meet the criteria for that attribute in gcc 4.7+, potentially leading to miscompilation. - Fix build with gcc 8 -Werror=cast-function-type - Fix warning from gcc 8 about suspicious use of strncpy() when populating struct sockaddr_un - Fix installation of Ducktype documentation with newer yelp-build versions * d/control: Update Vcs-Git, Vcs-Browser Checksums-Sha1: 90601f09ea799f8f73742263a29223a50234d0fc 3345 dbus_1.10.28-0+deb9u1.dsc 3177c3f8e65629dd6be7b60002da80d6bf5366f4 1998830 dbus_1.10.28.orig.tar.gz 5a7d04e09c0c220b1d035d6a03dab96655cfdbee 833 dbus_1.10.28.orig.tar.gz.asc 88373bc62a77b94a24893399e62d5e44dea135c1 57500 dbus_1.10.28-0+deb9u1.debian.tar.xz f90bb1acac6c403a7ae9c472e49d653dd2309479 8031 dbus_1.10.28-0+deb9u1_source.buildinfo Checksums-Sha256: a4758356f5a71e87804f3b55e1f83f41c10b19ddb84595e322eeb2cd44cdb367 3345 dbus_1.10.28-0+deb9u1.dsc 63f5b1d57360be5c147ef561e67f8efdd9034e1f12b7aba41feb42b376324552 1998830 dbus_1.10.28.orig.tar.gz 5da985dafdf223b7f5e0c6e51c608fd7d87e681e0c1eccfa2970be2978c0bed9 833 dbus_1.10.28.orig.tar.gz.asc 83c883431ee58fbfd7dcae4c763baa904e14b835023edff0dd495270d56d59b3 57500 dbus_1.10.28-0+deb9u1.debian.tar.xz f6cf9cfa2d44a4759ab174a38c97808729c09e9c6c292cd1ee30484d8080c34f 8031 dbus_1.10.28-0+deb9u1_source.buildinfo Files: 38180eef98e7ca9f6c33e6b5742f087c 3345 admin optional dbus_1.10.28-0+deb9u1.dsc 9c853418bdc44df243e51aacfa6257c3 1998830 admin optional dbus_1.10.28.orig.tar.gz b51f95419107e9b0f52485498df5589e 833 admin optional dbus_1.10.28.orig.tar.gz.asc 5477e85465b0697f4ca759e8774280e0 57500 admin optional dbus_1.10.28-0+deb9u1.debian.tar.xz 620d351fbf97d418e600493f8981e0f1 8031 admin optional dbus_1.10.28-0+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl0BQNkACgkQ4FrhR4+B TE/7/w//WmqVkiGJslULEoy9b45IF4d3OMCkO6ztAphi/S7d52W8+iRh/J/VRsJs 8ZJnpXC+xgBKei35+oj2XGUjyxtV8IR6qKh4lxgjIzQLDTUqrVxWboNDgXELrY59 KoSWV/E9lBlpsYBSFqFui/C1s7uPgID8RndQMhgHNEHmJLD1jhEzQKAEOZLemuWX A0kblQnCTb+OEhfn6FeaGGPB5BSbLoNgMkx0Lj1e0Gne5CFxgU4w5cDuCuFXZIQC PBR3PvwzhsW22HZW3i5qpjKLj++dzRpg4h5ACq55Pf/zyof7ZDtS2R4Ew+A3xADm ADQMNCw++LBvhI/Ij3LeZ57ltyHDioRjOz5sX6UEZ3/jtaNd5wSwgP1snJzFb2pI
Accepted flatpak 0.8.9-0+deb9u3 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 26 Mar 2019 21:11:16 + Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.9-0+deb9u3 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Closes: 925541 Changes: flatpak (0.8.9-0+deb9u3) stretch; urgency=medium . * d/p/run-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch: Reject all ioctls that the kernel will interpret as TIOCSTI, including those where the high 32 bits in a 64-bit word are nonzero. (Closes: #925541, CVE-2019-10063) Checksums-Sha1: 6ed2af8f2ffd9fc2bfeda9eeb2e79a849a5cc093 3021 flatpak_0.8.9-0+deb9u3.dsc ac006afff371083fc5693ef110ab784e45401c5d 18992 flatpak_0.8.9-0+deb9u3.debian.tar.xz adc1bd1077ecc95489e8c6ee045271b4cad3bf0e 11061 flatpak_0.8.9-0+deb9u3_source.buildinfo Checksums-Sha256: d6c26bb4a80806a87a7ee7b989f38c33bfdb721a04b20dab22d16ec51f06bce6 3021 flatpak_0.8.9-0+deb9u3.dsc b63eef3db93fd97fa9ab91cbae11b3805b8b614f52b94f4dc25f9d6becd89470 18992 flatpak_0.8.9-0+deb9u3.debian.tar.xz 7806e7d6489595edc5c7081f62e0d8e7bccd76c6e5a355bc8c965d05dc1a4ba1 11061 flatpak_0.8.9-0+deb9u3_source.buildinfo Files: 0403edcbc763ae0fbb3d2a417e154ca6 3021 admin optional flatpak_0.8.9-0+deb9u3.dsc e10033597546a3d38d985a077258e78d 18992 admin optional flatpak_0.8.9-0+deb9u3.debian.tar.xz c91fac71fc3e57f27cc8f8e3a4a3a692 11061 admin optional flatpak_0.8.9-0+deb9u3_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlyyUTAACgkQ4FrhR4+B TE8GWg/8Dp0Kc+S2NFvbwuSAfI3ssUbaBlbAzAl1V/LL3f115k9kBNara8fYKnBK ZXmEgu4yIJXXB2Qj463wy525lwMum7Z4UEGr/StsRM+UlVrVwt7wfz3ogDKsGZzt YNe7Id+K+oz1duWKK95eCYBnGhY4XcoTT+HzLlyiDdbK0MFbVKJvETqJe9loamgv 11OETh1GbBq4grEXtPcrhm8o2VMiDc8Zaydgcn3rKPq4Ldadyrlibghytp0pgj8B T0IDFnUeWkhW6gcBI9qQWtP3VZjdVe0nYKAQru+1oG/gyt7Rj2ZH3HFB5ncgFsk0 4v+LgqTyE8bjVFa3kajJfy6CBM6XslA7zDxtSHBZk7MH974MkTSDXCqgsdYQPkDK ruNWDM2+INFXg0YXlI0vG9EG0cvpkZMMNRkO0eq9pPPhux7SmRPyXCqQnUR5wdV6 8S3+CZyftLHZYloIj/vAvbH+kjIZxMSlhLbZE7PmV3kBSfXkYl51lw6inYpgNNx8 Q7lOqNMr3Kta2eGlYwS1J0Qz0l20VfleAqIwikK6mUUjG2Ka8dusEYMPiEdSzV3K 7IH+ohd18vJWuqJmMUYXE7J5VQxwlDA72zOZvRMJlA6aWqXlKUGTkUeV54qZx/w1 fURjNgdzDAXyj1EHMlrYHHNr+J3VXPE9uN9cgHvKJzotNfQmIx8= =sQWO -END PGP SIGNATURE-
Accepted ikiwiki 3.20170111.1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 26 Feb 2019 22:57:58 + Source: ikiwiki Binary: ikiwiki Architecture: source Version: 3.20170111.1 Distribution: stretch-security Urgency: high Maintainer: Simon McVittie Changed-By: Simon McVittie Description: ikiwiki- wiki compiler Changes: ikiwiki (3.20170111.1) stretch-security; urgency=high . * aggregate: Use LWPx::ParanoidAgent if available. Previously blogspam, openid and pinger used this module if available, but aggregate did not. This prevents server-side request forgery or local file disclosure, and mitigates denial of service when slow "tarpit" URLs are accessed. (CVE-2019-9187) * blogspam, openid, pinger: Use a HTTP proxy if configured, even if LWPx::ParanoidAgent is installed. Previously, only aggregate would obey proxy configuration. If a proxy is used, the proxy (not ikiwiki) is responsible for preventing attacks like CVE-2019-9187. * aggregate, blogspam, openid, pinger: Do not access non-http, non-https URLs. Previously, these plugins would have allowed non-HTTP-based requests if LWPx::ParanoidAgent was not installed. Preventing file URIs avoids local file disclosure, and preventing other rarely-used URI schemes like gopher mitigates request forgery attacks. * aggregate, openid, pinger: Document LWPx::ParanoidAgent as strongly recommended. These plugins can request attacker-controlled URLs in some site configurations. * blogspam: Document LWPx::ParanoidAgent as desirable. This plugin doesn't request attacker-controlled URLs, so it's non-critical here. * blogspam, openid, pinger: Consistently use cookiejar if configured. Previously, these plugins would only obey this configuration if LWPx::ParanoidAgent was not installed, but this appears to have been unintended. Checksums-Sha1: 8c7ec3f78150f5c57ddbcc64df5c86cd222bc1ba 2223 ikiwiki_3.20170111.1.dsc 9b6b95c1da66d4492f5d935db0df73f3b949faa2 2618416 ikiwiki_3.20170111.1.tar.xz 15e570feae476535dba5b0fe5722cdb5529c255f 5494 ikiwiki_3.20170111.1_source.buildinfo Checksums-Sha256: 7ae898ad6564010f968ea260edcc9364110f46b2c3f8152285efd179bd127f01 2223 ikiwiki_3.20170111.1.dsc 443039c9b0ae748d7cb80543a217ac4074cc32a89d12c52ff5ff39e836b70488 2618416 ikiwiki_3.20170111.1.tar.xz a5733c439bc019713e95919c6530e686bad797f3769f445eaf1f981f1528c013 5494 ikiwiki_3.20170111.1_source.buildinfo Files: b7fd75ad3a26cb0d7b38eee430963f03 2223 web optional ikiwiki_3.20170111.1.dsc 707a04bb99abf54670dfb7f60b76723e 2618416 web optional ikiwiki_3.20170111.1.tar.xz 1bfe891d16b617d2b4d8d0b32f59819b 5494 web optional ikiwiki_3.20170111.1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlx4IgQACgkQ4FrhR4+B TE/bzw/+KAixsYohnQNq0sS4qvdX2aX6ejJ+Hr77w+Qg0LVBA+gTYHSUwpZ+Y3RS Uqrzr1c5/GWKxrk+FSnhRMXD49E4fatwfT/qbX3wSlBKyR+D1qOiYj+YZeHVGAIn kDbYsXzj5zmLVsZ4h/RDht3Nf/h3tMrCojvwAzOciByXugM56Fz59CselLCWndiL L4/xCH4nV6EmAfjBGRqE4RBPsMkIaKMVsoMOWaznPDm4T40ODR2IgTYabDaJ6Pt7 WV+HygWGiPnJ2zKq7SsEr56GA4RtuZzzrAqCKWO0qh1e5Xnb/gJlGi5ksyjeuEqu kgmmAA+zAr5c0hpr3+gMGxINZLm6kn2syU2Q3C87JXFovjwIqg9WWlFrXyQ1IHqF 1Wn7VUVG93ue/WSDzA9eRbDHafMfU+npItdlclVDIqKpEsqfBPzCA4wMNFFxEgpo 7L7taERl58DFUm2aY7TpuOvJBp2kmcmjCr4g7BELIAtAhapzDcHiZKAF9oMnzO2+ Ir7LOGA0d4JxQBmVAWn/cGQnCKAR84b+c3GqZGPzTgrHwfnlixHmQabr9PAc/IHU mc+CbK2j5Kkr/Y+hhHxU/DtanHJr0JH8DnC3S+WyYJoxZ4ybFVRgFY8GhOnybiCu CRu9fAAng856iXdJeMGoU8xFkPofOCitu/mPkF1c5TdilEGRBzQ= =A7Dm -END PGP SIGNATURE-
Accepted flatpak 0.8.9-0+deb9u2 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 12 Feb 2019 11:11:22 GMT Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.9-0+deb9u2 Distribution: stretch-security Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Closes: 922059 Changes: flatpak (0.8.9-0+deb9u2) stretch-security; urgency=medium . * d/p/Don-t-expose-proc-when-running-apply_extra.patch: Backport patch from upstream v1.2.3: do not let the apply_extra script for a system installation modify the host-side executable via /proc/self/exe, similar to CVE-2019-5736 in runc (Closes: #922059) Checksums-Sha256: c4f7e8525e3e4925fc297b6f17c3105e10c8fa7d5639a781bbb309acdbf221cf 3021 flatpak_0.8.9-0+deb9u2.dsc 5f72c9e7aa686c78dc4b30df5b674f1df906a38488be4116c967a31b9b23 18448 flatpak_0.8.9-0+deb9u2.debian.tar.xz 718c66e0d49b98937ab19d8faae61a25d62c02419ac7498efd2cf09c834543c9 11061 flatpak_0.8.9-0+deb9u2_source.buildinfo 9df2823e12461c96c87d1e3cadf49963b5fefb6be8ad04dafb84c58b8bcbbf50 750480 flatpak_0.8.9.orig.tar.xz Checksums-Sha1: cdfe6e1ccad08e44e91cbdf55ea85833a3fcb14b 3021 flatpak_0.8.9-0+deb9u2.dsc 074125b318afa8d1cf46265db6d115845cc92b5e 18448 flatpak_0.8.9-0+deb9u2.debian.tar.xz a58f816ac04b05688c24ad962bcd9598ed81aab1 11061 flatpak_0.8.9-0+deb9u2_source.buildinfo d52bd785423ea882df548aa71d6fcd2f4db09e83 750480 flatpak_0.8.9.orig.tar.xz Files: b8a48cc8727c08982b0efb0bf9dbcabd 3021 admin optional flatpak_0.8.9-0+deb9u2.dsc ba10d2c52e936067fa6767374480729d 18448 admin optional flatpak_0.8.9-0+deb9u2.debian.tar.xz 96569213028c0e185bd5f16cb3b84e15 11061 admin optional flatpak_0.8.9-0+deb9u2_source.buildinfo 9e4dd45c0b7082063bab9fc688a5b26e 750480 admin optional flatpak_0.8.9.orig.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlxiqfcACgkQ4FrhR4+B TE9WiRAAn7/qVCufVOqyyGFapX0vOUgyDUJBEFtGIWlPAuFwMTIWYKK0ICtM4v2L mvEsOdelDAK/6Fc6B2VY9KshSr1AIAwEqUUAF621L7QW4OcFKLzFcbT1BRFoHhts n7u1kgr9el+h4Y+7RVlizDvgT0mG3SrJJUIEhA2VLzQlDAhQpAgYYAFusVRs9YJt fAMz0ofron0WtG/vAcNHgfSwKC+quH8XhPOdSisiNapDlOjmCcFwuXoby+SwrBYY jKcwAPhNJH59Ad5Wle85toiulhnMUeLqvbR5Cbnb7wrnCqaGl/aC2ZPMMoAcLzGs Ki+aydR4xn5AnAhJDcDWjFPHPuSwe/9pmHfdXbgwNK+HlCO3JFkWP4LDbzKZ9ryQ /7W/Q+lwWdw26z/Sa+2oifxv+X1dvQMzM2f1MXDl8G1omBvTsB9kjN0hJ4oTdZ7M q2KPi976h18D6DCoFa+lBxflGmclyxzyCfOHdS2GgqnmXe2QVjna2dkZrPahhYSo zMhBP3RIV4YaTTyYi5Nn3LuUUf1rKBXexCoc60O5Tex9DJdpbBwkstwliZi3caTm mo1SD5gcgekM3+0nnKupY8kKnycwbEPq3qUR7qyd3oscLMGN3mKTCnFvMebXlgC0 6BUK5G33wINp9GivPpWKZjes01jky4w7xLvuJ8TtZ7LisampDeg= =gDG7 -END PGP SIGNATURE-
Accepted dbus 1.10.26-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 02 Mar 2018 08:59:25 + Source: dbus Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev Architecture: source Version: 1.10.26-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-tests - simple interprocess messaging system (test infrastructure) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-user-session - simple interprocess messaging system (systemd --user integration) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.10.26-0+deb9u1) stretch; urgency=medium . * New upstream stable release - bus/bus.c: Raise file descriptor limit sooner, while we still can (before we drop privileges), fixing a regression in 1.10.18 which negated a previous fix for local denial of service via resource exhaustion - test/*, build system: Add a regression test for the above * d/tests/root: Re-run test-dbus-daemon as root, since it now contains tests that are skipped as non-root * d/tests/root: Allow stderr output, because test-dbus-daemon emits some (and it is not a problem) Checksums-Sha1: bf53921069a610dcdcd812671ca25cc1e648 3101 dbus_1.10.26-0+deb9u1.dsc 8f71a1b7322af88dc47a36d7276dbdec8a6a0ea2 1992385 dbus_1.10.26.orig.tar.gz 01abc801a117c060de93f99b2cde5134bd215afc 56916 dbus_1.10.26-0+deb9u1.debian.tar.xz b6e629c7639076fd5f7a2a8ba597c077b93ee765 7743 dbus_1.10.26-0+deb9u1_source.buildinfo Checksums-Sha256: 94613920acebc29acae80a32e95b31ae078c2a92d663eaee58fd44e793d53f0a 3101 dbus_1.10.26-0+deb9u1.dsc 358abe5db6a24128c3ffd1242b26774f6c9877429c15aa1df9294e917ae1ac01 1992385 dbus_1.10.26.orig.tar.gz d077aa44c738d5101a9292db503fd751fdc50afbb2d72eac2a034eeca8d5b9c2 56916 dbus_1.10.26-0+deb9u1.debian.tar.xz 6a05d55c6d324945a7c6295cd8a30eaf9a81b1417e4b40f6e41150720d844a4e 7743 dbus_1.10.26-0+deb9u1_source.buildinfo Files: c4fcac44715b75360d91898371219a2a 3101 admin optional dbus_1.10.26-0+deb9u1.dsc 5a068adf7811e53dd061866ecfd4d689 1992385 admin optional dbus_1.10.26.orig.tar.gz 857143c0867bb4f43d689b32b45fab46 56916 admin optional dbus_1.10.26-0+deb9u1.debian.tar.xz bd6d4721bc20b87dcc7d6a106702bed2 7743 admin optional dbus_1.10.26-0+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlqbF0gACgkQ4FrhR4+B TE+fjRAAo4hSVV5dQzkGreu7rj8Q7C+CPFCoo4Q5cC3h2TfeV/j9nPI4FKC0nISH nsxXLcgjHRTd4yIkE49J1qf4Wk409vIw7KJ2hm/fRz5q9wVeumRU3rVTO8AEgXbe c4LMbJBaIqw001/1B6Bsa6xcPnodOm8FdTI48qjKeE9qNdog7neeNp67JY4qvEso GzugqCgtA2/ishD9dqox/WZ39YzZLUU2pJjSzjE6jBwziooEqi7j3YGkiZYFDbhm s1E5/XQ8SZBBDCmV1gPL3I271yRdwPR6oesypogvbeESM22kxLgpoAoWn+Qm4Jmt DTJytscz2ILdZEVduOoVBKViGC5QzQrBsWbDRCf0Z6QmX4y15bsS6ImBGQwm7XKb 34HSKOA/QcA+U1vCXR4vH4QhQJvGOpjmaTqExfU06mtrjh90MYJbvqyo1bCLLFFL tiphj82J+RNViSH52Kd+8he9MftkFUnuaBTlT6xDxQfhaT4ZJWv1TmsSXt+/Bg5F KIv31+O7WEroMrJ6CelwucZgW4Oha6QW4jpYkxllJ4O0HVrS/zjpJcS6QjVpPDHJ v1eogEjh5tTA3ASXVzhh9qxnKR47OU7LatzBGXa4EwzOO4Gz7SJs53lY4swhFWmk HWA9+scjS9N11oeERTIZIsUZfNoxwMzdCqp56bDaliM0tTFSRCo= =8mzS -END PGP SIGNATURE-
Accepted flatpak 0.8.9-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 30 Jan 2018 14:49:40 + Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.9-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Closes: 42 Changes: flatpak (0.8.9-0+deb9u1) stretch; urgency=medium . * New upstream release backporting the following fixes from 0.10.x: - common/flatpak-run.c: Ignore unrecognised permission strings instead of failing, for forwards compatibility - dbus-proxy/flatpak-proxy.c: Fix a D-Bus filtering bypass in flatpak-dbus-proxy (Closes: #42) - profile/flatpak.sh.in: Simplify and improve profile.d snippet (already done in Debian since 0.8.4-1, no practical effect) * Drop our patch to profile/flatpak.sh.in, no longer necessary * debian/control: Update Vcs-* metadata for salsa.d.o migration Checksums-Sha1: d4bc6ad8d04104c6f8960a1f98d0b42a8b7b2ece 3021 flatpak_0.8.9-0+deb9u1.dsc d52bd785423ea882df548aa71d6fcd2f4db09e83 750480 flatpak_0.8.9.orig.tar.xz 49cafbd9250e54f8b9a480e2591fcda37a4f9110 17472 flatpak_0.8.9-0+deb9u1.debian.tar.xz 30557a01efbbac3e135f0d692ddbca21fa60cc6c 10692 flatpak_0.8.9-0+deb9u1_source.buildinfo Checksums-Sha256: c11b4a27f51c6e9909b486e175552a09e756132713ccb67a504a315a159f82e9 3021 flatpak_0.8.9-0+deb9u1.dsc 9df2823e12461c96c87d1e3cadf49963b5fefb6be8ad04dafb84c58b8bcbbf50 750480 flatpak_0.8.9.orig.tar.xz 92a4f709d0b7c2c659ec78d47de178a2ab2b72cea81a8e49b5c0a6f4c6f2b992 17472 flatpak_0.8.9-0+deb9u1.debian.tar.xz fa65e63fd5668b51e758b1da5c2b87e3e43604974e59bd368cde1df735f6de21 10692 flatpak_0.8.9-0+deb9u1_source.buildinfo Files: 44c8b5dcea855ed5530e703ddcd7cb8c 3021 admin optional flatpak_0.8.9-0+deb9u1.dsc 9e4dd45c0b7082063bab9fc688a5b26e 750480 admin optional flatpak_0.8.9.orig.tar.xz f534975d96b2412e4d7899bd7e583acd 17472 admin optional flatpak_0.8.9-0+deb9u1.debian.tar.xz 8054097cd2df861987d211595e903a13 10692 admin optional flatpak_0.8.9-0+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlqQoiAACgkQ4FrhR4+B TE/qLRAArC3afQ4ThXDAbuM3b6XHMY2a4hswimUXYnhujQic3dDptiaOWCRoc31O XZSanIGyAL2AU1TVtBOd5V7YWNWO4ajwJsCWXfBfDIw7h06mXvotfPE/HFZgUw8g y9RVpSs8GcLkBshO1UzcgbNWUnCxG5dK0axeMrJ1lokJ6pyT/ZaKs/HgjZxfoZIf rNOtOTW1L1Z8OnsrabkWcELoHblj4w2PLKxcQN82fHA+CA82Kk6J/OIS3QWZ6T7e 3XQF2iG0C3PMZUe/X1kIfoXtEuD/tiqwtCdQvWnoD+wi179SaI12+FcClgcB0kZb X27WA4gGOsUF4pGlZON2wd0w0Zu+afCEHOWOxMf55Q4SRr8OtWl9gEyw/KLo7XGJ 3M1YFvYr9YritMr0JxXaqOgY0c1dLpFfbXuQjnuLF+gLJboLJTWWXL8iaMQEwH3k dpzqWYZ7T/YpaXKzw76APVQr//Si6V5nJyd/cb0Jef8TpaMoVpnFjKaruDkGXVej +IuAUity0KE1VBFGKPQmke1J7tzjQslcQ0DbMyp8WG+MPxace/OPSFi/b7y9wEIy g0kRYc6Z7lWTleBjxRzKDYNKmJga5CJGpOB1mGqGN3UqoMJfmsZGNyKHcy624Mgd rx7t65E8i1hmSzKwwTSDqrw0qNzMyh2x/BO4fCyLrThlEZnhV4o= =0159 -END PGP SIGNATURE-
Accepted flatpak 0.8.8-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 31 Oct 2017 18:51:01 + Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.8-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) libflatpak0 - Application deployment framework for desktop apps (library) Closes: 880451 Changes: flatpak (0.8.8-0+deb9u1) stretch; urgency=medium . * d/watch: Watch for new 0.8.x versions * New upstream release from 0.8.x branch, backporting the following fixes from 0.10.x: - Add compatibility with ostree ≥ 2017.7 (in Debian, the same changes were already in 0.8.7-2) - Security: Do not allow legacy eavesdropping on the D-Bus session bus (Closes: #880451) - Ensure that LD_LIBRARY_PATH is in the correct order, respecting extensions' priorities - Ensure that extensions are mounted in the correct order even if they have differing priorities, fixing Steam - Remove PYTHONPATH, PERLLIB, PERL5LIB, XCURSOR_PATH from the environment given to sandboxed apps - Give each app a persistent cache directory for fontconfig - Make /usr/share/icons available in the sandbox so that sandboxed apps can use the host's icon theme - Disable debug-level FUSE logging for the document portal - Make the * wildcard at the end of a D-Bus filtering rule match zero or more components, so --talk="com.example.Foo.*" behaves the same as D-Bus' arg0namespace="com.example.Foo". Previously, it would only match exactly one component. This matches a proposed design for integrating equivalent filtering into future dbus versions. * d/p/0.8.8/: Drop patches that added compatibility with ostree ≥ 2017.7, no longer necessary Checksums-Sha1: f75e557f0767771138ead79a4dafbee4282a4340 3050 flatpak_0.8.8-0+deb9u1.dsc a2aaeced6ca28308e3208640f7a33b36d476c6fb 749940 flatpak_0.8.8.orig.tar.xz 7600207e7a2c0e7e3aa99cf0f0fd5d18c2107671 18052 flatpak_0.8.8-0+deb9u1.debian.tar.xz fcb4a238a8c5f91cc0a92a8bb7a0d8bcde3a6672 10615 flatpak_0.8.8-0+deb9u1_source.buildinfo Checksums-Sha256: e3bb014465ebcb9829b494915053e177d924896faa644afbe7f901fc1e66d8b9 3050 flatpak_0.8.8-0+deb9u1.dsc 4fb500ad371e6693a9a68f4511665f6ac3c0ec18ef0ffd882409d90366386a36 749940 flatpak_0.8.8.orig.tar.xz 9c432b725a8c2b83caad9d6df9835400401fe7ac4c9fe59b15067d140db16f8f 18052 flatpak_0.8.8-0+deb9u1.debian.tar.xz ec03a04382327959572de3ec26ed87b3e996ed18363094b543f90c41ede3998c 10615 flatpak_0.8.8-0+deb9u1_source.buildinfo Files: 1e41574f66cf4af733e0492183387ee8 3050 admin optional flatpak_0.8.8-0+deb9u1.dsc 295f69da11e034a8abff8ed5e017ea90 749940 admin optional flatpak_0.8.8.orig.tar.xz 7dd07869924228a4f83b3f0d5b67f1e1 18052 admin optional flatpak_0.8.8-0+deb9u1.debian.tar.xz f488c41c0c2405b594854448eca10e74 10615 admin optional flatpak_0.8.8-0+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlpaOWYACgkQ4FrhR4+B TE+REA//YV1XVCHdZCrxy/TKnJxgWlyqIje7L4GlZoWeiKTqdYCfWpQPrk9HN6Hy Cdyzv86lvy3qIVStZgXOKZk+67ViJeyZd6A2aImh/2B5pKZvfhbxl72r8LxXZPVS G5Zh/fapBvsWijqtrWkqEWATanOGEh9qAdGKvybvuBtmnzFlvSqYAYUNHAc5MWg+ vKvMabQGuAw4nP8fukMvt2eAHVZF/KFqBvTlepCSbmU1yCKyd/KrHxnVZeDXtIX2 J0aZcVfaijm2d8p10nUra6dWMMK1edwdU/6ocpAguTGgSUebq9KGRfJvXvQx2FKi A7AhnXfiMDXEvp2+ASpwPgzy63QVnD2UV3fe8Q1ajT/VpfFf0lBmpxCIRkIcrn9E QKuj+riYXGT3vdAtOEmS3NIOSkoRurC8eqIfR/aFnC2wWjGVDuziZOyrtJMpTA8C WO9uETUlLZxyUpr4Labh2RYzT1Hg7X0inJaZ1FnHKFeTPNAJZ35ljAfxKq+rwuk9 5Jk4RjkYHOHFxRHR2PBuyrm2g5Unt9j3DytrIjiTtVhKzUKluHIqOjLREPh3Enc6 sIXl2dPQZ59Pt5UJt5emjM0g+bXr1NWUQnuGF+CoUjQjXISasrpNO0PchjSYQ9i3 6Jf0BC3YkVxGDoE2ldKdo9fgFO0wOXPvVJTKWmQVvlIjAeAp2r4= =HppI -END PGP SIGNATURE-
Accepted dbus 1.10.24-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 01 Oct 2017 12:09:14 +0100 Source: dbus Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev Architecture: source Version: 1.10.24-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-tests - simple interprocess messaging system (test infrastructure) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-user-session - simple interprocess messaging system (systemd --user integration) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Closes: 872144 Changes: dbus (1.10.24-0+deb9u1) stretch; urgency=medium . * New upstream stable release - dbus/dbus-sysdeps-unix.c: Increase listen() backlog of AF_UNIX sockets to the maximum possible, minimizing failed connections under heavy load (Closes: #872144) - bus/config-loader-expat.c: When parsing dbus-daemon configuration, don't delay startup if high-quality entropy is not yet available: we trust the configuration anyway, so algorithmic complexity attacks via hash table collisions are not a concern - bus/*: When using the Monitoring interface, match message filters that specify a destination correctly - test/monitor.c: Add test-cases for this - tools/dbus-send.c: Avoid a compiler warning when gcc gets confused about a conditionally-initialized variable - dbus/dbus-sysdeps-unix.c: Avoid a compiler warning on Solaris (not relevant to Debian) Checksums-Sha1: 5a43c103feb3ff5f371d73a4737c7ba78312d735 3342 dbus_1.10.24-0+deb9u1.dsc 85585fdfbaf83b7183f70eb840727172206592f9 1991358 dbus_1.10.24.orig.tar.gz 22a602e6a5438c4d2ebe2c46e5790fe80437072d 833 dbus_1.10.24.orig.tar.gz.asc 5d46f56c761189d5159850b2f9506f9fa2ba4dec 56644 dbus_1.10.24-0+deb9u1.debian.tar.xz 39057e408e58f0aa4beed6e9ebb499a798dd2418 7606 dbus_1.10.24-0+deb9u1_source.buildinfo Checksums-Sha256: 1df04f5eddb3d4b19c4b8f032e99f6749aaac4492a83e9880ccd8b2578793b47 3342 dbus_1.10.24-0+deb9u1.dsc 71184eb27638e224579ffa998e88f01d0f1fef17a7811406e53350735eaecd1b 1991358 dbus_1.10.24.orig.tar.gz 118f0f3ac8f2669598edab73c65eabaad1ef6c8d75a4827e4cd20f45b7de24f1 833 dbus_1.10.24.orig.tar.gz.asc 1639c4dd144cd1868e3b3ad64eb8c8ab4357951d467c07ab459e0b0fc7dafc6b 56644 dbus_1.10.24-0+deb9u1.debian.tar.xz d599293173087a1460b2de5a19ea0af25821bb861399d231ed8df857f2907199 7606 dbus_1.10.24-0+deb9u1_source.buildinfo Files: 8156dd63e717bf8f11fa6bd344b6fd3f 3342 admin optional dbus_1.10.24-0+deb9u1.dsc d548ae16f9a3268fe4650ccc86a3f06f 1991358 admin optional dbus_1.10.24.orig.tar.gz 8df40cd7bc2c291f0b792707ef56 833 admin optional dbus_1.10.24.orig.tar.gz.asc 73ff5b1fc4cdac15d499d5366a4242bd 56644 admin optional dbus_1.10.24-0+deb9u1.debian.tar.xz cb4c419982d22b151de33af2c349db83 7606 admin optional dbus_1.10.24-0+deb9u1_source.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAln3NZcACgkQ4FrhR4+B TE9HfQ//ZmC8ggIKDerBnyOcsmXdN6W/dR0UHgscw1MBL6vV/pQIWf1qnaJ+7O7l 5/njiS7N8+I8tTLXUMbk3/QZfw4HdxclHUYjp1D+Sy5dc01RdxmqDKixjt6Ximxo Ypvj3z/ij0H8UiAHywJ1IFd2umviSe1XrqzOcpWmQZcv0Wnf/fLCllbbTx8XwNm/ s2rrOWKX1pVE0KGtl+JK+9pzXFwYwxNvf3prrIk4tCskJ8bxLRDXSyPVmtw7prXS 3faxIttt/XWLWuAGzwV3rjLbdrkIkQvoF0CHgQ3LjCt4UiXB7IzkYAABx0SF2Shl AmdC0ms1jY7ioLTBlNdcZvazoe8Xw0l3Yw5oP19fRUu3v7V0lq83JWl533a/7aMO 70u8MW3UeTvdJ+GrKhDXxad8Ga2HHB95ITG6ECz5mKqemCMD6vMXV7WQotMxNd4t itSKfGo/JjXgXsHXB582cr1xicszbr2BopywjNphXd+vi9vfdLjcQlz1YYTsGNpd 05dngYHSiR+HYxkPAxqfsjvbEN434ToAaLEu3mfKZO7iMpEHzzxs0ymhxftPCdSA SLFDNmCV3D56pCxbi4uJ9ev6aHlDxAlWYBPYGvaYVlpUsaxOlP/YzJYwLBA+Xogi 2PcHq8d4SggvWb8cNNwWivwZaiQUFxlvvhmaOqRkpVj2b7tpnRE= =3GV+ -END PGP SIGNATURE-
Accepted ioquake3 1.36+u20140802+gca9eebb-2+deb8u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 12 Aug 2017 10:15:49 -0400 Source: ioquake3 Binary: ioquake3 ioquake3-server ioquake3-dbg Architecture: source amd64 Version: 1.36+u20140802+gca9eebb-2+deb8u2 Distribution: jessie-security Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: ioquake3 - Game engine for 3D first person shooter games ioquake3-dbg - debug symbols for the ioquake3 game engine ioquake3-server - Standalone server for ioQuake3 based games Closes: 870725 Changes: ioquake3 (1.36+u20140802+gca9eebb-2+deb8u2) jessie-security; urgency=medium . * Add patch from upstream: + Address read buffer overflow in MSG_ReadBits (CVE-2017-11721) (Closes: #870725) + Check buffer boundary exactly in MSG_WriteBits, instead of potentially failing with a few bytes still available Checksums-Sha1: 74428d865287b740fe942e9c61a1c1de6148bb95 2487 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc dbc1bef688c31dde83efce5f289850c7691720d4 21328 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz e082506121ad0039040f3e2281bc9c71d3c82dc3 1467444 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb 1cb478e031d39aafacfdaca9450c69b4192b4f4b 858832 ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb e63c1b73d34d6286529530da8fbaa01213e71bef 5103992 ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb Checksums-Sha256: c4d7f5d1fcdc4880aae830fa285e3e34d3f92013389e8ad3169bb8d6e9748e4f 2487 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc 431d0bfd241c03b668496e4d271e0ac687f73acfa3e61afc4a61b1e160bc4821 21328 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz fd4620dae688a1da9930ba643d0196564868e31c2b6ff1c9ce070263bf36b093 1467444 ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb 4b46e8a300db691e4d6482a7dd6b9b8d01193bc098901bb716fbd5edff6edfc4 858832 ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb 44928de612b490e254e99744230e8fd7759d8d8b4b06de5fc1219e470c94924b 5103992 ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb Files: 15b866d299bd49dadcc34345ef9c174a 2487 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc d32e16ee6ae297b0dff0e4c3ba3410d4 21328 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz 682fabb11d7546db34626145ead2b97b 1467444 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb daf0766b20ff78047d94af3dfdf648b2 858832 games optional ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb e65241a904a16c1911b57c85bdf8cde9 5103992 debug extra ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlmPYnQACgkQ4FrhR4+B TE9wkA/8Cle5qH/luXYIP88Kej/xFamqc4K8OHmU1M6uSEpk+UlnG6lVWJc76NJR DdS5d8bLHVD3gaLMPxGhIunXMPVM4gOwdvLBxtDoBy5auTtBLTWS01KGmOSPnfC3 86cVKsftKRDsd5b08sybyXK8H4em7p9DhMdxscB4GJOXxLQybkJGWy9qzebg0E1n 8RZIP7xZvSpA7EzPurH5XIdfftPGFmy6TvluT3WZ1n/L3J8OqpJbUV8M0E3+BLfN 7C/0nME8imeTGVBFtN9AgyGNQzXO3gydcizYW38Qj9M3BQMrZ+smDw6+LHbyhtjC sLBMcgSgvsrZpRhx4Qmnzlfii5sQItQJGUdurQuYPmLmVniaFSVE3KYOersmC4WS xM9tTZAY/63cBLJbMbEjcbkibBkxKnDEhcShIWde6yeK54NVgiF7oiNLoOh4bQhx MRRTDBZDialZE+CIND5NngICE1ns9C1/ITT64bKNYO68hixLYZcBybW2cqZANy8S 4FTXaau2UJVAW4COkB+xcl9N8xx40rYWNwxJeSIFCXbtxNN2Jl9NZTQQFJ9bEIe5 TNBO5olDkcYka/fHoIvhdkFnRsYG0LznAnDwyBGsyamnBXK72JPGuhoGHfvu6EgG QsGPVeE1uP94qJVFEMHLqn1M5NHfDiO9tX346J21T92m+1AToQY= =+EfJ -END PGP SIGNATURE-
Accepted iortcw 1.50a+dfsg1-3+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 12 Aug 2017 01:38:46 EDT Source: iortcw Binary: rtcw rtcw-common rtcw-server Architecture: source Version: 1.50a+dfsg1-3+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: rtcw-common - common files for Return to Castle Wolfenstein rtcw - game engine for Return to Castle Wolfenstein rtcw-server - standalone server for Return to Castle Wolfenstein Changes: iortcw (1.50a+dfsg1-3+deb9u1) stretch-security; urgency=medium . * d/p/security/All-Fix-improve-buffer-overflow-in-MSG_ReadBits-MSG_Write.patch: Add patch (from ioquake3 via upstream) to fix a read buffer overflow in MSG_ReadBits (CVE-2017-11721) Checksums-Sha256: e961c6fcc11039429c6c08b9aa48ea37fc244830427cfbb2f3b85169db227d5a 2275 iortcw_1.50a+dfsg1-3+deb9u1.dsc eb3759edd69ba452b32da6d459750eee5a17340116fdf9801a12bd284612f333 34628 iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz 3ce3b0c2b8c1f312074fbc0e13999e3fa6f0adb4446c30eb648ca0b8558af8f7 3310804 iortcw_1.50a+dfsg1.orig.tar.xz Checksums-Sha1: ac3656719712e4d8ccdda1d449f3146d667dc7cd 2275 iortcw_1.50a+dfsg1-3+deb9u1.dsc 3329807b406b1909cba3ac7060639502a0c6ba2f 34628 iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz 02db7fb3dcac03e61d8e76566559b5b65175955f 3310804 iortcw_1.50a+dfsg1.orig.tar.xz Files: 9543eddbbf8a2a38acf429ec0446fe6c 2275 contrib/games optional iortcw_1.50a+dfsg1-3+deb9u1.dsc 193d64c9f800ed9e7a246620baf34d01 34628 contrib/games optional iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz 4990631c91ce3174ddb98746383046f1 3310804 contrib/games optional iortcw_1.50a+dfsg1.orig.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlmOlHYACgkQ4FrhR4+B TE97WRAArsM12RX8Lr34dAJvLKkjEVhyaPnf5D1J3n5KpVru8ZqL09C2Wf6kyWul FYj3jkZWRIubRpXjuMZbQ7mccLGz12xZU5FFRnvm6cXHCkKorsU9TbIs7MRIdiCy m3EOYwodTyVxKeTUBm18QymgRhlbni/SHxBV2xjIBqJ0Ek/5cBoh80Vb/elLO3LJ A3VXXsCuOqk4HgHXUzw1c/gEAxuMS/9yFjLOmZf4VlnsSAg9Pk6+GE0oZydjiA7V fTMLuStj4YnAjHSLAQ8ofbTjeczJJXlkYAQpADU7Y2OumY+qKlXtrFuw2S0W+ScH TDaOghi1sj9oZbOOuafeGWxTsCK+NV3FbaciWzIZe/o3qYP5K/dzf7tsrON4IhR4 Y2uq392zUq3qixtjg02hgjxbltoptQ0RChuKCVq1HVmX9bsQ0KtRjbSEw5m+mfFZ IaBoiwFIZWFtL0r9f/wCcagNAO3NsfznsAKh0TCi6xl/IhHPZEkVYdVzRKD6hn33 WrygGOhM5lNwaYBLqLd5oZGWLwPdsokomCT6qEEKghj1M4FllnfQXHFSvTuW42mS hofpyZBGheOGXLxBIspUJkgcLv1RYdD4v1z+0wf+N0XzwxKcUZX2hXW6YLThKlt4 w7QxhG2Wfu5fzlpK7RHfyxm+eTlx7Ryo+lloObrIFV10g4RkZmA= =Ieul -END PGP SIGNATURE-
Accepted ioquake3 1.36+u20161101+dfsg1-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 12 Aug 2017 01:37:23 EDT Source: ioquake3 Binary: ioquake3 ioquake3-server Architecture: source Version: 1.36+u20161101+dfsg1-2+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: ioquake3 - Game engine for 3D first person shooter games ioquake3-server - Engine for 3D first person shooter games - server and common file Closes: 870725 Changes: ioquake3 (1.36+u20161101+dfsg1-2+deb9u1) stretch-security; urgency=medium . * Reference CVE-2017-6903 in previous changelog entry * Add patch from upstream: + Address read buffer overflow in MSG_ReadBits (CVE-2017-11721) (Closes: #870725) + Check buffer boundary exactly in MSG_WriteBits, instead of potentially failing with a few bytes still available Checksums-Sha256: 61bd336200f9cee4b02f23aa1231cb272bb04cbd711b40e5ec16295ff92b8b4b 2310 ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc f2fc89d979a84088a08f81debd341a4905dc2149185874d17943d2c2044be151 25268 ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz 16c071721387a37b592aad30ed3eddba66cdea87ad808af85f465396a51f4d0b 1886888 ioquake3_1.36+u20161101+dfsg1.orig.tar.xz Checksums-Sha1: ec34c192c83e46aaaedbeffd72a60fe6239a80ee 2310 ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc 47651a22549123ec28a480a100764e47f362c0ff 25268 ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz 1287724135101aeed70f4a3cbb0883ca52995052 1886888 ioquake3_1.36+u20161101+dfsg1.orig.tar.xz Files: 6e7b750d4288a9a7388e96c2f45ed3ac 2310 games optional ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc 81a330e471f12813df4ca9207d6417d1 25268 games optional ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz d14b0fca7af5ebc86688acd874e49b44 1886888 games optional ioquake3_1.36+u20161101+dfsg1.orig.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlmOlB0ACgkQ4FrhR4+B TE9ddRAAqhfiJV/e5ctum/N6saW4wJ7HMcWbOgFT/4hnej6me6QwzgMs841imexd g1c+Pm+frjx3G1L/e3JHy+vPkfycqvSf/8f4QN5NTvrHj5FVfdV/9m6VHA4MZRlf VyDd1j5xD1KJhq3/r+NqmvQLft4JOaQMFbh8fkykxIKVR27S/mhhZxMAk0cEgIKw aoxZ7GWOA1JfaSfoW6A0e1Fn+uRpZcxGZOpe6CJmBiUaESNGUITb4+lw7E7N+FzG 5a3xedYqdLW+WfdbzwqZ44PerE9zEEFrChyUEZFQyTSv+vJHwYZRkEcxDsfVEIBF CG55IONIggPIpixybSeRGk3Cqzs+rshBHF33hqQ+Mu0hIvaZ67j0uy74s2uATqfK ev3cP48PLumZ+Aix2Mu7hXIGXUY9M3NXSaGf8C9ykJyr4WlMEq7KS4VH0/Kw1/TB qZeSVrzE8LEdom9XadkMgqoTLNRiOqbU/LWEDgIixv85iAMmlX7E54pqp8dOkuYa R/5ld/LpZSw6WcR6vBW0WMuFSXGM7W1SUcwzn25tka/sl0GC2hGmSlOZEdKck23m 0IFfw9RLteGKZlXwIHZTVHnVyX7m7SCVmYzMw9HNobJh/mCqNlZu507IxUBj5aGC /eNhGcTYHOk5vJW46BlcmtThutQ5NZBCCs6iIOg8BdfpqQ1buos= =LCdy -END PGP SIGNATURE-
Accepted flatpak 0.8.7-2~deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 31 Jul 2017 08:44:53 +0100 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.7-2~deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak0 - Application deployment framework for desktop apps (library) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) Changes: flatpak (0.8.7-2~deb9u1) stretch; urgency=medium . * Rebuild for stretch * Merge changelog from stretch-security * debian/gbp.conf: Switch branch to debian/stretch Checksums-Sha1: d0854284899ddbe7e672c3c0661f6d88f5165961 3050 flatpak_0.8.7-2~deb9u1.dsc 972e4c7c06b7a0b7fb64f696b266c6deaa2d82be 21256 flatpak_0.8.7-2~deb9u1.debian.tar.xz Checksums-Sha256: a556448359256ad168d315440515bec81c676233d1810c754993b4466160e1de 3050 flatpak_0.8.7-2~deb9u1.dsc 0e798e52588f0b52edbb170af915e46c181bae2ccd48c9af70d41404364cce9a 21256 flatpak_0.8.7-2~deb9u1.debian.tar.xz Files: 5967030e8817258db0158834ea654a3c 3050 admin optional flatpak_0.8.7-2~deb9u1.dsc 4dbc7353dffcd0b41c93d2c029c934aa 21256 admin optional flatpak_0.8.7-2~deb9u1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAll+7PoACgkQTej/KmPH zJCbWw//dxkA46zPT58gFUZt5xjdBrUtcqwVPMaJmlBBH6GphLCAw3u5m3utXD2Z SstqC8b+DX3MoSOzME67ujOMwFXLXpab1FAv7+7vR+/EB4AXdzL86ZyAZerFHdKB ib2MonlG3sVYLFyv4jb7k+gh0FC2nBHEIsuCjTEjptzCVZjEnbjL0ivvrQ2XDm69 LCSmJ7LxZWrrt2nJyyNdP2z4zF/leaKy4F7PHv2je1puRtxTTUiYE7pGv+Kyt1Bm yV3BUuhvlVSX4LwJNDAd/Hnkp6cr/Aet9MWI/CO2OrAIGWMx8muyOs/94kgoCQnY dXP3jH78o/e0RWeXTDFBH/rZVlBP6wYgBf7IHitKb49TstbTxzwOXIm18cuOIdrg ZEdkIFX4lqUqyvBHvnzx0A/Va+83xvyFHB8IrVVoEW2xucxaiCsd1IoSJdRsAdbo o82ZGzlzwwnxZmqQ3KQVnjkobHpyxallQHfKEaKHlAk0AbVJ8JRRXmdEuXoNyj+t HZJeD93c16jTkmeVFp0Nzg4d/Avm69vlUWbn6XmgRE91SG2GRjZPfHT0lEALrYB7 jzkbL7qGzaAztp4Tst2c/lzNutTZf6hQe24NPfCWc/GbGrYUFTgcjMe+6EIGSeXp MBZ0Y7W7XKbxwFno6kyl06HxWuRAXPxuPuOHWOyEMZa1W8dsRqs= =4a92 -END PGP SIGNATURE-
Accepted dbus 1.10.22-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 30 Jul 2017 11:23:02 +0100 Source: dbus Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev Architecture: source Version: 1.10.22-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-tests - simple interprocess messaging system (test infrastructure) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-user-session - simple interprocess messaging system (systemd --user integration) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.10.22-0+deb9u1) stretch; urgency=medium . * New upstream stable release - d/copyright: Update - Drop Doxygen reproducibility patch, applied upstream - d/p/backports/Replace-DBUS_USE_TEST_BINARY-(etc.).patch: Update backported patch to apply to 1.10.22 * debian/gbp.conf: Set git branch to debian/stretch Checksums-Sha1: 448abca4d87792af2b8777a56ab9664838e963b6 3101 dbus_1.10.22-0+deb9u1.dsc 9d4e93475fb95498cc105af68c88eb51f3062e6d 1989350 dbus_1.10.22.orig.tar.gz e93f8393a537a6d22230a6fea0fee31482f54adf 56372 dbus_1.10.22-0+deb9u1.debian.tar.xz Checksums-Sha256: c6128b8750366aa6529ac3063fe83b18ec5d3b3f49ce8b1420c32ac3293c52e2 3101 dbus_1.10.22-0+deb9u1.dsc e2b1401e3eedc7b5c9a2034d31254c886e1fcbc7858006e0a1c59158fe4b7b97 1989350 dbus_1.10.22.orig.tar.gz da3a6af29e81a7ab37a7513bb9e2dac25fe00bd15cad239a15faa937da35c74d 56372 dbus_1.10.22-0+deb9u1.debian.tar.xz Files: 9f4d986452be3f23905d0576eeddf265 3101 admin optional dbus_1.10.22-0+deb9u1.dsc baaa10b7cb49086ad91179a8decfadc5 1989350 admin optional dbus_1.10.22.orig.tar.gz ef94f71f6ebf600683ed1d681b9afde1 56372 admin optional dbus_1.10.22-0+deb9u1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAll+7RsACgkQTej/KmPH zJDiiQ//bYx9hF7bA9DtCe5XHMicwdMc68OjzIZBc9JuxvNtvN5m6dXNTyZyCNKP durAvJ9ZpJvqF4qggDEgA0G5iisNeIN6+0ZPvQueEvoya2BZACjwmrDhpqCEbgDp bqwX+pYaFRLXR/XNEwnLHAEE0sGZwlf0h7WwaxQayYI2CUos6mg4065QBj8skxtX /TlS/4bCiBeJ8x9jn2oY4BcAGbrxcKHHPuQBLeV8gz3dEflPtJaEivqoZpzEV87i olyG9Q2yiD8n946LP5CHdN7YDSy8WVJ3WoxiXYq9vJLIirqWp0wIYTopT3KMs2sP mm/3w61bnhZNQdxpqsDLNeVp3HNZgVcJyqKlqbjDaMGAPZNDbfYx23eD/BB0LHEy hZKyhwWAwtSOurTV3MCaamt090qbuRlo5c38+OlRsGON5aW28fG1c1hUXRFC7Qry w+2TPxfy83UaAJTREk0vWsOT5aCtAJ2L8gjst4pfvsI1Z3bBgFBxXmTFzwDlE1DD GKTjdTJOoZtecI4tPy59Ont8JHB0f0k2xOtKdaBMwYeSyVI9LRghAcZwLaWM5xQh BbGdj71Xtv+qzLONVSAJpBEmSgvEf4imDi6d8Av6KUJqqmhcxL5HVC6W4ew/lDHx VQEKZDVCjCicjMk6wlwT1D1EHKDCvipWiYY5SeuSD+qzIH8oLnU= =Hmwm -END PGP SIGNATURE-
Accepted flatpak 0.8.5-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 21 Jun 2017 12:05:49 +0100 Source: flatpak Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev libflatpak-doc libflatpak0 Architecture: source Version: 0.8.5-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Closes: 865413 Description: flatpak- Application deployment framework for desktop apps flatpak-builder - Flatpak application building helper flatpak-tests - Application deployment framework for desktop apps (tests) gir1.2-flatpak-1.0 - Application deployment framework for desktop apps (introspection) libflatpak0 - Application deployment framework for desktop apps (library) libflatpak-dev - Application deployment framework for desktop apps (development) libflatpak-doc - Application deployment framework for desktop apps (documentation) Changes: flatpak (0.8.5-2+deb9u1) stretch-security; urgency=high . * d/p/Ensure-we-don-t-install-world-writable-dirs-or-setuid-fil.patch: Patch from upstream stable release 0.8.7. Prevent deploying files with inappropriate permissions (world-writable, setuid, etc.) (Closes: #865413) * d/p/dir-Ensure-.local-share-flatpak-is-0700.patch: Patch from upstream stable release 0.8.7. Make ~/.local/share/flatpak private to user to defend against app vendors that might have released files with inappropriate permissions in the past Checksums-Sha1: e846b80ef7681b3c07097543e4caedb8dc27d0c5 3050 flatpak_0.8.5-2+deb9u1.dsc 89d0784b27123ec61e2efa36febfdbe2f2edb009 744808 flatpak_0.8.5.orig.tar.xz 7534963a7c9b6bcb222c20e4dd978f65a63bd24b 19528 flatpak_0.8.5-2+deb9u1.debian.tar.xz Checksums-Sha256: 1d3ffc3be9fc2596816c00a81534b66d891959540dfa6bed8dfe7b69aa6bac74 3050 flatpak_0.8.5-2+deb9u1.dsc fd31bc23e5b62a187fa9eaed937aadac2ab48911c338005b39ed889b2ebf95e5 744808 flatpak_0.8.5.orig.tar.xz 4033dc04ac1465fec19145e7814d98a64660184403ffa16b44465eac680ea604 19528 flatpak_0.8.5-2+deb9u1.debian.tar.xz Files: acbf2aeac7e5c18ee1a741b7433d3e28 3050 admin optional flatpak_0.8.5-2+deb9u1.dsc d160b96fdee4be1f9b0ecf60641899f8 744808 admin optional flatpak_0.8.5.orig.tar.xz 97a2460243a83ffc779718a904bcbaa0 19528 admin optional flatpak_0.8.5-2+deb9u1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAllKl/oACgkQTej/KmPH zJC8vxAAjzDWa3as3hhmA7sLD3mQu0/j2/q2Jv85TM2NF6crpzYHYvfDG1Aat7xK OYttxp5DfkcSfYM1zFI3PBwvPg/wrd9aHZC7IHKUSsfbXnqNnRrwoXns+7UheC6L BWrGmH0e4vh9fOvPeGB9DeDtE2qZ/SNhbSFcG1SeailDgnSVhaumSIh/HiUAPwra G4WybbByMXHj3FtWMdL551DHr0IWvDhDBZSkhf/WO/vY3sAFk+u/Ix7LA/KM+AM8 IZBtd2I8woT7a0B3qSBYXFp1KGkJsSLZvSb93fe70GBW/XqCCpZHl5xktyRvc3VL wypDw4vuK1dXcnpfptgiIL/avEmecIHUYdd7C/OYlNDGuycarI3ozoEcuY1jwbW5 mGkTEEcLa4XuNgm6II61NfSEvfpgkPUxHz9X2P4LLIWODHJQw+iCUQdmxtT4oEMv M9HqGLgBe6XZGdJu9LT9wawrdXGxT0/kLxgl/S2ehN0QIdJuwJgue+pzneqDrxId DQMhCRvRbn2vZbT8s/pQW7OTGYgikn6DLyf9kRlwvDsM+NZIHOKHGYH6OuH1Crp4 LfnoIT4K0VTUb6dzoAlnikklmQkm/Xc0cg1Y1C1D6MTdSruDvRwvEn4y86vN0VAI IJuQcqtWroq4Wv2mWPjAJOwh0YN4LfDJvwe2CrpB7W42MeC3adg= =Lp3U -END PGP SIGNATURE-
Accepted ioquake3 1.36+u20140802+gca9eebb-2+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 14 Mar 2017 22:29:41 + Source: ioquake3 Binary: ioquake3 ioquake3-server ioquake3-dbg Architecture: source amd64 Version: 1.36+u20140802+gca9eebb-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian Games Team Changed-By: Simon McVittie Description: ioquake3 - Game engine for 3D first person shooter games ioquake3-dbg - debug symbols for the ioquake3 game engine ioquake3-server - Standalone server for ioQuake3 based games Closes: 857699 Changes: ioquake3 (1.36+u20140802+gca9eebb-2+deb8u1) jessie-security; urgency=high . * d/gbp.conf: switch branch to debian/jessie * d/patches: Add patches from upstream fixing security vulnerabilities - refuse to load potentially auto-downloadable .pk3 files as ioquake3 renderers, ioquake3 game code, libcurl, or OpenAL drivers (mitigation: auto-downloading is off by default, and in Debian we do not dlopen libcurl anyway) - refuse to load default configuration file names from a .pk3 file - protect cl_renderer, cl_curllib, s_aldriver configuration variables so game code cannot set them - refuse to overwrite files other than *.txt with the dump console command - refuse to overwrite files other than *.cfg with the writeconfig console command (Closes: #857699; CVE-2017-6903) Checksums-Sha1: bdd735c15c0f0dfb6cea1a4fc050cd59d90c8418 2487 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc 4d6782c17e106c9a5f3c03872d6d8e75941e2008 1876668 ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz 2cbc3cda14617aaa86bfd7dbfae8ee03927cf8c3 19520 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz e4de5d55625b0c5dfbd4a61a49bf2ed8dc35450f 1465252 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb 0664c2d59fcb025f98fb0723142d19f62e76533f 855718 ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb f8b1ed5dd6b5a0beea5244de2f87e5662cf9cd79 5094952 ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb Checksums-Sha256: 308ca0fe3aa91e2c129db0d8f89e7830e7c9d1a3e77c25d8457240fef6eb0a90 2487 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc 436e83a5754a4a7106d787aba58454f9cc0d99d6476e20e4bd448aa6a025987b 1876668 ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz 879e2e6951e1e221d9da2c1208ff332d3aa866a0dd707492f21d6d4b5cf1ce71 19520 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz c40adcbf4882370b7b08e571d5f28968987252bd3859678d0ebe272ccf3852e9 1465252 ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb 2ced31044609186b1f134303cf183e2781b86f761a5f0599fa577258c3340754 855718 ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb bcf6cc1843b23a07c87a022e39f51ddbec497edd2411f8eae14e492fe5f5b2b9 5094952 ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb Files: 4dd04d5f454ee0e2097d9baadbbdd946 2487 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc c2c32361212294bc8a6f032f97e06832 1876668 games optional ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz 2f92dc6560e66b9ffbc2f63f4a050ce8 19520 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz 4fb5f8dadafb1e2819a82bb33d97f3ba 1465252 games optional ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb 07866243a3e599f500f70dd60e7faab3 855718 games optional ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb 0ef15e7a82dce3d3255282c5ea1a31bb 5094952 debug extra ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAljIdNAACgkQTej/KmPH zJD57g//evpyzZJifwB3HE5nnUqro6efoL2+BxMu9rQ2XJrNHScmauLmh509lRlX f78AHqYouHb1Bij10JgOJgrkpGoTaniB4JTvCyuMw8YuVpcGQMRoW/fn1f2oVXba HH3Lf5ksHaS+s2V69rPYRqMlTJCZbIIWzUI9civvO/OxmX81wxCeodNeKa/Q321E 6erQ7i3RqQR1g4hTm/a9WPGUeOCXgSyNdkLcxR6QuFj50tHrZYTmpVAmV4BwQdP7 QpA1GYCxFzHpTC7WTBRo46SrwayRYP16tWD0+zWGR8cIimzal/QQhN6UMlXgXNOd nWac8bvvT06raha271EJk3895yXBlKOkJSQ1kVIdvfGhAmWm4L+071VM5qk0YHM2 zhyFRGD8UYwHDmalvul8vVLPUR1hx9y/kcKVPbGGzZr202peUkjiITQBJe7Ctp8g H11rLsFNkW6FZBKY7XlQhEpSRWmirC7Y1qS7RRlAFqFAvhWKeZ+w3NKejmle9JTF RrADHcKurjVLGoT1Zo4SmmIt38EaJUHe0Ooj6T6uEfhEN6scob09Gj1RP6ZAxbt1 PjyP6fqohWBEXOGYAwKlnjVXB7mDik63W1372nb18RuBrFz1Jj3fXaYMnou89MNa TNEhUuB870Mqh0kINIWq95n0Z56S5OhJeKoikSMoTxy1PyWAsh4= =QpKT -END PGP SIGNATURE-
Accepted ikiwiki 3.20141016.4 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 11 Jan 2017 18:18:52 + Source: ikiwiki Binary: ikiwiki Architecture: all source Version: 3.20141016.4 Distribution: jessie-security Urgency: high Maintainer: Simon McVittie Changed-By: Simon McVittie Closes: 835612 Description: ikiwiki- a wiki compiler Changes: ikiwiki (3.20141016.4) jessie-security; urgency=high . * Reference CVE-2016-4561 in 3.20141016.3 changelog * Security: force CGI::FormBuilder->field to scalar context where necessary, avoiding unintended function argument injection analogous to CVE-2014-1572. - passwordauth: prevent authentication bypass via multiple name parameters (CVE-2017-0356, OVE-20170111-0001) - passwordauth: prevent userinfo forgery via repeated email parameter (also CVE-2017-0356) - comments, editpage: prevent commit metadata forgery (CVE-2016-9646, OVE-20161226-0001) - CGI, attachment, comments, editpage, notifyemail, passwordauth, po, rename: harden against similar issues that are not believed to be exploitable * t/passwordauth.t: new automated test for CVE-2017-0356 * Backport IkiWiki::Plugin::git from 3.20170110 to fix the following bugs, including one minor security vulnerability: - Security: try revert operations before approving them. Previously, automatic rename detection could result in a revert writing outside the wiki srcdir or altering a file that the reverting user should not be able to alter, an authorization bypass. (CVE-2016-10026 represents the original vulnerability.) The incomplete fix released in 3.20161219 was not effective for git versions prior to 2.8.0rc0. (CVE-2016-9645 represents that incomplete solution. Debian stable was never vulnerable to this one.) - Fix the warnings "cannot chdir to .../ikiwiki-temp-working: No such file or directory" seen in the initial fixes for those security issues - If no committer identity is known, set it to "IkiWiki " in .git/config. This resolves commit errors in versions of git that require a non-trivial committer identity. - Use git log --no-renames to generate recentchanges, fixing the git test-case with git 2.9 (Closes: #835612) - Don't issue a warning if the rcsinfo CGI parameter is undefined - Do not fail to commit changes with a recent git version and an anonymous committer - Do not fail on filenames starting with a dash (patch from Florian Wagner) - Don't add a redundant "--" and run "git rev-list ... -- -- ..." * Backport t/git-cgi.t from 3.20170110 to have automated test coverage for using the CGI with git, including tests for CVE-2016-10026 - Build-depend on libipc-run-perl for better build-time test coverage * Backport IkiWiki::Plugin::img from 3.20160905 to fix a regression in 3.20141016.3: - img: ignore the case of the extension when detecting image format, fixing the regression that *.JPG etc. would not be displayed (patch from Amitai Schleier) * Backport tests' installed-test (autopkgtest) support from 3.20160121, adjusted for compatibility with the older pkg-perl-autopkgtest in jessie - d/control: add enough build-dependencies to run all tests, except for non-git VCSs Checksums-Sha1: 33858105736a8a9b4a5068bcc210eb32680a1e2b 2117 ikiwiki_3.20141016.4.dsc 33056d7e4cc66858dc16dd33deeded101c3d78db 3355017 ikiwiki_3.20141016.4.tar.gz 833f2c380e6192f4b66292f18d04fc0cbf481380 1431210 ikiwiki_3.20141016.4_all.deb Checksums-Sha256: c000c05af1fb5359fcf4be03cdb8ff3598f8e99648acabc73e06399058fa7cfc 2117 ikiwiki_3.20141016.4.dsc ab571d99f1897492b86bfb42ee625d4d9bf77d1f1024afe833a75499b4ea8609 3355017 ikiwiki_3.20141016.4.tar.gz b774615740192adb9cf0f645a80c428d28634c34e671ff3e2e8d6f659e53b945 1431210 ikiwiki_3.20141016.4_all.deb Files: d9a185f7ee6786538b1ea39f2576dc28 2117 web optional ikiwiki_3.20141016.4.dsc 3ad760018731e99aef77e2456462e9fb 3355017 web optional ikiwiki_3.20141016.4.tar.gz a00680d717ca319e0edf8f99b34e9aa2 1431210 web optional ikiwiki_3.20141016.4_all.deb -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAlh2meIACgkQTej/KmPH zJCLGQ//fH3n1lmWKsdt+ri1wj2lA9pPBA8DPDpMVL+WnbAekhTztfy0xY0W/HGY Zyiq6PSLxKMO8j2vP+wug3XTjo+iNb1ycJMaSwwpxKNZVh3nLqk+5sHDau2HfoHB LrglOKZTx9k65hOj/6Rb+/onXqQSFK0JCi6Un/oibZD9b0C8a/670MQ2CuDeS1UD z7JAurOWfrtpK5Rg1wMxUsaz1NRaxNF+WjxZVsAszugozCoNs0NBQ8q3gWSOe+V/ oRkbeT7DsAEn0YNf449OR2vwt0HiVaG5c8E8zl5vmPk68qBoEKCWoBj67eb134mT k1tSce4DqcK7xme1Km08HF3c4S9GyJu1mdCJUdzQx8txv1PseToUR8AF6Djb25C3 fBrCX84zd6+V1HbPGoFfyPOs/GnPOKOoOohmRAecRsN3bt0Wn1Z+3/rcs6K6A3qy 6lkFw0oAyWEwV/in08jQvwCJ1aJdT+RAo1OVIwtPZK/dY6hZzT3/Cq3OYPrxTL+e D74fj3ItNrMok1/wx1SzxUfYk/DgJ+iEPXKp5svNw6QB9JB1mi25ux3pgVazXy+H DgLQW
Accepted dbus 1.8.22-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 10 Oct 2016 11:42:50 +0100 Source: dbus Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: all source Version: 1.8.22-0+deb8u1 Distribution: jessie Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Closes: 813970 Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.8.22-0+deb8u1) jessie; urgency=medium . * New upstream bugfix release - fix a potential format string vulnerability, which is not believed to be exploitable in practice * dbus.prerm: ensure that dbus.socket is stopped before removal, so that a new connection to the bus won't cause dbus.service to be restarted (Closes: #813970) Checksums-Sha1: e515376ad0bcba52ebd0d34812558c7ef78fb9a1 2889 dbus_1.8.22-0+deb8u1.dsc 6e71490083037ce2d78067eb8856cfcca3be5d1f 1894768 dbus_1.8.22.orig.tar.gz 346ed566f48feb5c8910cf622ac8731bb30f26ac 38168 dbus_1.8.22-0+deb8u1.debian.tar.xz a4cb535664dbbb66a3d918f3a3ed019a0d289453 1324650 dbus-1-doc_1.8.22-0+deb8u1_all.deb Checksums-Sha256: 13cf18c13043baccf6fb26d18ea4e0fcb4b6859942175b3b735a1f63608c75c1 2889 dbus_1.8.22-0+deb8u1.dsc 19a52e5a42b2a2faf15a54745a098bb8cf55a76598fa4a0b8b6d886adcbe1d53 1894768 dbus_1.8.22.orig.tar.gz 9c702fd70d8b451351bf8566dae78ef57e129d7cad9fcde000923575131fda5c 38168 dbus_1.8.22-0+deb8u1.debian.tar.xz ca7b1594fa23f929b1a6f408c7f4cf7bcda8d19d79c5550bb5918501ce58f317 1324650 dbus-1-doc_1.8.22-0+deb8u1_all.deb Files: e712378604c0906a869ed2958ada542d 2889 admin optional dbus_1.8.22-0+deb8u1.dsc 657332bfe49ef15ef4fe0f0c8757e9ac 1894768 admin optional dbus_1.8.22.orig.tar.gz baa3ca29acf719fff6cbfc036fe3dcb6 38168 admin optional dbus_1.8.22-0+deb8u1.debian.tar.xz a98f7c96d0f0d56cf87c89818f7a8881 1324650 doc optional dbus-1-doc_1.8.22-0+deb8u1_all.deb -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAlgxtZsACgkQTej/KmPH zJBBVhAAhErj4T3dty/GS4PXw1Vux4uEmHpk0LY39H6aB/FIy0fbAMVs8Pe0118E yeXaiiNhgWA8WHtaGpBjlf//YxuteeANzQX+eNSAebtmzemph/EUqctuVcmMI/ZC cyoTbcRbk/kF3NO6W5svx7vJEGIcZ2YoES7mxwsVR6c7AtWn1GSdtTWnRIficUK1 73MQWVQpuWFEzontCHxp4xRi3IvaJzwK+Ty8A/R2DQYB5eHU0HNtmwWfplFMjUag ouYCsMR63fqdNkWWmJQ0NfROc53JCRUBonGKUiNa5HYUBDX6wk5uqI+BD8AC9Sd4 Rje3QRdADSNUjK/Qq+TvuFwGE9bXvgKxIB9zhlUoo4Ek1jQRqVE73CHyvzzrKb3G vUrvptP1UZw+yesJXotgWsp52dCuw0VOzfD1N0miCY35FjBfJCrbfdXevU8oVcW6 NiYlRMPHrbZ6ZYldM/6S8sGOxjzduz7gWGmS5QYGN8K07XHtV/xNb1r9F9GAoKwd SOmX4xvmG9mfLGvnvwM3KX5leE4lxbLPq/qmjwOszbPZPnZHpaOulk4S8uPgCohm KXQpUZI3F1sZpQaQ3qGb7lp7+WuAL/g+50j2FHDKp0DEuobhEa3MdPPb3Byd4BRp DU88ZhIyYuLYaN5sdnlx4NYCPRgGrtwsoUNE8QTWzTeoatCFC6Q= =yxTM -END PGP SIGNATURE-
Accepted ikiwiki 3.20141016.3 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 06 May 2016 07:55:49 +0100 Source: ikiwiki Binary: ikiwiki Architecture: all source Version: 3.20141016.3 Distribution: jessie-security Urgency: high Maintainer: Simon McVittie Changed-By: Simon McVittie Description: ikiwiki- a wiki compiler Changes: ikiwiki (3.20141016.3) jessie-security; urgency=high . [ Simon McVittie ] * img: stop ImageMagick trying to be clever if filenames contain a colon, avoiding mis-processing * HTML-escape error messages, in one case avoiding potential cross-site scripting (OVE-20160505-0012) * Mitigate ImageMagick vulnerabilities such as CVE-2016-3714: - img: force common Web formats to be interpreted according to extension, so that "allowed_attachments: '*.jpg'" does what one might expect - img: restrict to JPEG, PNG and GIF images by default, again mitigating CVE-2016-3714 and similar vulnerabilities - img: check that the magic number matches what we would expect from the extension before giving common formats to ImageMagick . [ Joey Hess ] * img: Add back support for SVG images, bypassing ImageMagick and simply passing the SVG through to the browser, which is supported by all commonly used browsers these days. SVG scaling by img directives has subtly changed; where before size=wxh would preserve aspect ratio, this cannot be done when passing them through and so specifying both a width and height can change the SVG's aspect ratio. Checksums-Sha1: 65def5ad90f38d3934e982d3b9b7e8f7c27bfdae 1899 ikiwiki_3.20141016.3.dsc a0d1ba4e17e491a113089e4dc74c0f59cb5ce4e2 3268755 ikiwiki_3.20141016.3.tar.gz 669bdc6ca47712113dbc34a9bf4ec2db06f41744 1428292 ikiwiki_3.20141016.3_all.deb Checksums-Sha256: 5648aaa9bfa1c5835073cb8baeed449a75850ffba6ba0bfb857e3afd16793900 1899 ikiwiki_3.20141016.3.dsc bb9e9618a7e04b229a3d329ef66343381cd7cb77df603b4ff595313c2414581a 3268755 ikiwiki_3.20141016.3.tar.gz 77b122ca9679f4573fc5fc077dad59a021bc1478fe3b5f5b6bd5d72512fd66fe 1428292 ikiwiki_3.20141016.3_all.deb Files: 44630cdc7ce71506d88b2f9445291bc9 1899 web optional ikiwiki_3.20141016.3.dsc 352f16da52a29fdf749bd80bad7c913f 3268755 web optional ikiwiki_3.20141016.3.tar.gz 44fe4deb17ff3e0c7d6fb75ac7724bba 1428292 web optional ikiwiki_3.20141016.3_all.deb -BEGIN PGP SIGNATURE- iQIcBAEBCAAGBQJXLl51AAoJEE3o/ypjx8yQRg0P/03PZHgv5zYNk2WZAfBnZEVV z0e/a8ekon0nlEaVqQqrFdx/UCCnnAL17vm4aF80+5MP043Wi7lx5OXmOeLN3Ih4 TquG4vdRc3nXHFwJJWxOn/kF7JOXhnZXbZGgTQzmJnvED5M0LMFhc/BPVsyRHnfb V8ppvtLXmFsKJ/OKrL2wBN1Tx9ZYec5f1ZobPW+qVoEdUZF0p2++M44gz+2fjyE3 YqhaL3qFM1HgIIGuyWOAYh2cMnqV5VFffCEMs/B0D3j5kJGmUkSC2LWjsoAOBQ0u fJvpEFQ3UHwRlTGiFg3XEkOA/AjnUQZlHcM3G0XEW4IKTHbkeEuhAahx4gHsAAMI 2nesgwUSZQjw/pQA3GDf0uwn3Os1NkQT6dHERusO4Gx++R9cMcWF1jWM17zgp8bL 97Qr8/sZQvWlmZvJFmrcffGaBCwMmc1DrMJt+8w8bn53TZgJGSx7dg4k/9oDxGQQ FWAZOBQRzOQZdPtvqndaH9ibc/7fVf3pQT7t3CiFcVtK8Mqth/NAqat35t9FTjjC +yywoMbnWPtO8saNQ09RJb33qlANb85Bnw/Li+Es7V7Z3dzp3E4RK3Y5sCttvOAW QFCL+3V1irt7ebI88utw2er92DRN0Q5z6EM+k4zXWZG7q9I5h0m2h5HAA3SVIYUd ZkuqH54AMM3Jwv0u8pir =9Sj4 -END PGP SIGNATURE-
Accepted dbus 1.8.20-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 21 Jul 2015 17:59:42 +0100 Source: dbus Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: all source Version: 1.8.20-0+deb8u1 Distribution: jessie Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.8.20-0+deb8u1) jessie; urgency=medium . * New upstream bugfix release - fix a memory leak when GetConnectionCredentials is called - stop dbus-monitor replying to org.freedesktop.DBus.Peer messages, including those that another process should have replied to Checksums-Sha1: c5458551edaf5c1c004ab8aebbd797508418f0f3 1323916 dbus-1-doc_1.8.20-0+deb8u1_all.deb 5c1e4d3668b96a585ba18f73d034797f1bd04296 2813 dbus_1.8.20-0+deb8u1.dsc 906fde49b70306dfcd4ecc6cad7b32cc85924ed5 1871722 dbus_1.8.20.orig.tar.gz dc0e87083fe92dcec3c61635b6fcf98ef65f66e9 37932 dbus_1.8.20-0+deb8u1.debian.tar.xz Checksums-Sha256: ca2a1be370c7ccc3d9de823050aa602dc6d06a7b13b325e3147383dc5f7a1405 1323916 dbus-1-doc_1.8.20-0+deb8u1_all.deb f95445cb25efe8ccbe4c504727f8154aa4b422676fc6ab7a177f6a4d82a318c3 2813 dbus_1.8.20-0+deb8u1.dsc 5c4fbf4c64621c96e871da91d2b729a5b00536e116d3c4612a469d924b1b703a 1871722 dbus_1.8.20.orig.tar.gz 4b8c0a6f302d6f9e3b7f8eee8e3930023c2f247709417034de79307fc6a8740a 37932 dbus_1.8.20-0+deb8u1.debian.tar.xz Files: 2f4b79c6d18897420b55d93427b2ae07 1323916 doc optional dbus-1-doc_1.8.20-0+deb8u1_all.deb 8abf8c5d2915fbc39b1172e25ab05d5f 2813 admin optional dbus_1.8.20-0+deb8u1.dsc b49890bbabedab3a1c3f4f73c7ff8b2b 1871722 admin optional dbus_1.8.20.orig.tar.gz 772aec0614ec711ed1f6668a10e9f766 37932 admin optional dbus_1.8.20-0+deb8u1.debian.tar.xz -BEGIN PGP SIGNATURE- iQIVAwUBVbtESk3o/ypjx8yQAQhqoA//QtXbL49b6+yRSaUKC1Uu6APxqg9oW52M G16U+tYyZsrUZ5uUuVilpTTBmf2jsVbWNGb9E/JVs7klZZ9HcErl1dOgBvmyf0re c/QNQO4CRaDAG+zUP6ikD3pkRjOjj7Ev3mottEaz3/ejkUuYcr9JP402O/9GGmsM TmMyR7k4cneBNgpuO4PaSR2UYSncR1B9677MexzDQb92EwBJniQmKcvnZeeFFa1K 6CdYsXmwddeS9Y0L8zp+0FfaIP/u53EYv/zIjE1ZblwPI4edQknHcQKyvIPFufyn Emh/wZFUxnnelPuWL93Ua4f3FL1wlUlEY7u0WxYu+DCyEv7cJrxoPODE+EqdmW9Z 0IV73J9lVl33TJiejKn6OF1A41xgsXDni0MpZ00X9xH666Uzw/CyWy5wYspcBsj8 ACp5Qt49L2Nhs+NYFeBdZGkVDNeYJ130qdAUbW8WvmLCcc1F3V8OVxN1dqllf9Ob f7OrMzFGAe79ZC/3aOi5x3fRlV7RacqugugHRhlM9ZmS+xJl3wA0zwZw3kMZRj50 8LedrY4FIe/S3ksBlJzMFAQyz/xlwe/jfqb72nnO8WQP+EbfPWAH4xJGUhIBHKHl SHVtTADDP/VNJEhir9+zTAIzVLbylreZ/mMwMN51UIuic0T359KXAK5epahGK8n/ O8+fCeU9X6U= =o4CG -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1zlxm0-0003uj...@franck.debian.org
Accepted dbus 1.8.18-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 14 May 2015 13:52:50 +0100 Source: dbus Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: all source Version: 1.8.18-0+deb8u1 Distribution: jessie Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-udeb - simple interprocess messaging system (minimal runtime) (udeb) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-3-udeb - simple interprocess messaging system (minimal library) (udeb) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.8.18-0+deb8u1) jessie; urgency=medium . * New upstream bugfix release - Hardening: lock down the session bus to only allow EXTERNAL auth by default, the same as the system bus. This avoids allowing DBUS_COOKIE_SHA1, which can end up using a predictable random source on systems where /dev/urandom is unavailable or dbus-daemon runs out of memory. See the upstream NEWS for more details. Checksums-Sha1: d50e13938e7af04cffc0dd4c636099ad24af0309 2813 dbus_1.8.18-0+deb8u1.dsc a30be4a6efe3fe570d2a2cc4265f0ef9be9367aa 1868625 dbus_1.8.18.orig.tar.gz 32efed16319aed22afdca957eb60ab84e99e894f 37840 dbus_1.8.18-0+deb8u1.debian.tar.xz 4b303d0a8fc247287aa926eb8f9f5364a862aea1 1324518 dbus-1-doc_1.8.18-0+deb8u1_all.deb Checksums-Sha256: 8970ff1ec50f729f6071ad222c7fb035b2f8ce6a2e3477acdceed36aec9844d6 2813 dbus_1.8.18-0+deb8u1.dsc 36f2eb9c777a3c71562573da36a147e900a642afcd44d2b0470d992a4898c4f2 1868625 dbus_1.8.18.orig.tar.gz e985fe782137e4808d79349403f973b1dc1ab5c9b0cd9198625f2c753dac43b5 37840 dbus_1.8.18-0+deb8u1.debian.tar.xz b146c03f28303949921ff57bdbd8a465704471abf9584f458c688f7385a40319 1324518 dbus-1-doc_1.8.18-0+deb8u1_all.deb Files: e15bda7b6c8152c719e130c6fe06aa47 2813 admin optional dbus_1.8.18-0+deb8u1.dsc 83e607e9ccb1c921d5b6bbea2376a36c 1868625 admin optional dbus_1.8.18.orig.tar.gz c48c6e7ac2ad727225cf8b92d75cf060 37840 admin optional dbus_1.8.18-0+deb8u1.debian.tar.xz fa2c126899d26e0661ce10f5a4348759 1324518 doc optional dbus-1-doc_1.8.18-0+deb8u1_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBVWVol03o/ypjx8yQAQjQYQ//ZXeUVH5B19UjPbndBsChvyqr0+FyXWul 5vmeatd6IeA9xh8fXwRNwzMATqCc1biLKLtQG7jWsymz7HZew5drjW3xLNP4QJ34 b9dZO3Tgn/c30m4TN0HehwUVQ7LCutS7lAq0+4U2Z6zShFivo+102JQ4SCdq3FK0 IyXvNc7ow+PBKHmGgYGWfLBIozBUXB9w9kPSlXnDSdfBFHUVqOoq83ayIMZDunbm k+H3OqcL1wQf8v1CpXkqrq+ZzhHMqWJQ9+5cRFOshTftw6ZjKmVR3l1DXPGwTsq3 IMTzShchuIOtxuICxv4M9YuSYibp39AZ8D6BT5OaW/07/joTmUlrbIM1lZcK0/25 z4s/ub/myqSTrhKe2PhUUtSWsv/YNH7DLXnAwXjh1DUGQwKnqt4msj6d3j8SptkJ sKLu7LHNHmMhfl1z7unGlxFLHiHHBrAbrBunLF271atVRS3JkDm2v5enlWzjhlZY QP2m6uDgHREnfJGj65sDUXXLJBA9qdUc/KmMCW9ktYnfbNpi8yeiJYvZCty3N4C6 oYXfJrV9XhcDOMz7yBAXxgw90qU6CcQuljHPLHdx4FJQmo5Cz8XEbIWIjfx8hZIU iKAQUQGOxbpVXD+3W+Dsf2YsFgQcEw3jUQwIgDkFWOrdvsB/1tAC9fdf27TMoQ/7 yMEttaP5eqQ= =Ck8N -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1yxfbv-0001us...@franck.debian.org
Accepted ikiwiki 3.20120629.2 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 06 Apr 2015 20:34:51 +0100 Source: ikiwiki Binary: ikiwiki Architecture: all source Version: 3.20120629.2 Distribution: wheezy Urgency: medium Maintainer: Simon McVittie Changed-By: Simon McVittie Closes: 781483 Description: ikiwiki- a wiki compiler Changes: ikiwiki (3.20120629.2) wheezy; urgency=medium . [ Joey Hess ] * Fix XSS in openid selector. Thanks, Raghav Bisht. (Closes: #781483; CVE-2015-2793) Checksums-Sha1: 00cc739fe41b410820e45c864dfdcba074852d31 1794 ikiwiki_3.20120629.2.dsc 9c2c6406b4f9b60475e7f950598d2be97349e627 2777104 ikiwiki_3.20120629.2.tar.gz e57ec19e21371c0a6f75cbde0821b2af866f6949 1802842 ikiwiki_3.20120629.2_all.deb Checksums-Sha256: a060f97be1455c005547d413534be48eb68e99f3f5dce9c8f8460840ea2c2e57 1794 ikiwiki_3.20120629.2.dsc 3d7261de05da5787731e2147ce53fbd2bc98b4e3138f62b3cf13d680079c689d 2777104 ikiwiki_3.20120629.2.tar.gz f42d2dcccd4882f8a85bc474e8183da7e810c2ec5c2871836eb439da510c1bea 1802842 ikiwiki_3.20120629.2_all.deb Files: 0a96ca1b26b5022dddaba0f9aa270b64 1794 web optional ikiwiki_3.20120629.2.dsc 13a9475c1c185267a3df377786803bd3 2777104 web optional ikiwiki_3.20120629.2.tar.gz e2c3158191f36f485e7d78198041ff5b 1802842 web optional ikiwiki_3.20120629.2_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBVSOP1k3o/ypjx8yQAQhunw/8CMtU4cSRUd/A+elzNi+aF1uzWVBUZnHz e3c+Q7slTz20pN0nNtz+w2CWe5olvnOwt8wKDym/U077zCxkgqf5D8d6tYspKEU0 DiuycDYcmQbWkQcbiSGANmjUOJ/+4XMrepQsVW4sungcu0ZbVqzKSrHu0N2JOjKR ZM+5YCg2BuSpoazcRKIka65tLLQkrlesUen3d3RCfRoTjceQQxWqFILMJbS8mRBa yUaiIwQJvxTtPgl80lyZQ/Gx9wKxweezPpHpeClR9E4QZF/AeeptAyx/i0WFZOWP CVKEvDaWA3lHRHZsqX+qUPlB6RYs7p0dI8RCPcnKVJNMvm+MQ75+GzDfYKd+83AN QkXBRl/lX9XvKykv/CwtgkhusJczZNa/Xm8sY144JS6TpFLB+xvh1HSUrGh1i1sX FYJ/y51ioE/R/sMMcT51JaECx6hEYoSZpbLq9NS5+X0dGoYcYt/XMBQZ6eZnIMVI FIsCp0K9AhvQ8ZKcIdEIu1nTP53yoYnRpsDHTlQksJXmPati0ANbd9Oa4R+xBJo7 H7s8PWUl+B1d8qal+GPcyM+i4wJYl5vMdUGPaUEAmpZonpq8gcuRMLRahtbu04mS KoDuMaMLTsRTWgEVAhwYuGIsgPzZYAAJ/xSOvSnIzcbEKRAwzmsiJxGK/S4qyv7u jMugrphuHes= =GSip -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1yfzsj-g7...@franck.debian.org
Accepted dbus 1.6.8-1+deb7u6 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 05 Feb 2015 15:58:36 + Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: all source Version: 1.6.8-1+deb7u6 Distribution: wheezy-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.6.8-1+deb7u6) wheezy-security; urgency=high . * Add patch for system.conf to fix a local denial of service when using systemd activation (CVE-2015-0245) Checksums-Sha1: 4287afd675bd4d5025728be81d6afa5cd9a88d47 2293982 dbus-1-doc_1.6.8-1+deb7u6_all.deb 39d15fe156578e94fe4bc00c06f03ce7f9547902 2585 dbus_1.6.8-1+deb7u6.dsc bf3d58bcc8d21c12bb43a624da1aa63944e363ca 50124 dbus_1.6.8-1+deb7u6.debian.tar.xz Checksums-Sha256: 7ad951418127c4daaa9b9cc7bf1a1a7721a14b9aa2005fadfa700c662443e00b 2293982 dbus-1-doc_1.6.8-1+deb7u6_all.deb 5542196824588b18d81a1e6431e4ee0ded975404d344dd9548c7f9d4bb11aabe 2585 dbus_1.6.8-1+deb7u6.dsc 50fe614aa01f750af2c9848ed62dc22576c8203f8750b167fdb1698ce7a6eed9 50124 dbus_1.6.8-1+deb7u6.debian.tar.xz Files: cd1e902d14319141061fc36d51e0931b 2293982 doc optional dbus-1-doc_1.6.8-1+deb7u6_all.deb 9f4845762603d09abb0ce49f32368dc8 2585 admin optional dbus_1.6.8-1+deb7u6.dsc f222077e2ea9441f3f84f58868facf83 50124 admin optional dbus_1.6.8-1+deb7u6.debian.tar.xz -BEGIN PGP SIGNATURE- iQIVAwUBVNkG2U3o/ypjx8yQAQg//A//Q5tmTrSNe8EICTNhhXsyzi+CcuNxKqGw z6YyykBPydDmvyxWQou4cpHu4DfF8hnd2VDbC5RTCDpOT//fwJPdaH52fi8TJ2E8 oXQM7oQwhhrgBIxxrminzFkTL9Qr0AvQo9wVjw8Pvjq4kJGcydhtOuwUvxy+6GuM SJ/bBWFr7c3mxQwlmSF5tdvjWTLrCo7qa3EARXgT6JI8uHVgOtVHnyQ2W7ef/NDZ T4M5BJPYRekmZhMTigUUbLCi/9wGvpslIZocqoAyZcDhiPw8lueKuxJiPpmIWM48 SPEvjqAe9/W4ObXb2oo92n7m19WiM7UVPiOO1njyiEE03DJ57upN1C2dGNaCb2m0 KCLLy83kCNmZt7AqTqTQUn/BqDRZpb2c4xJA8qtz4rTofmrBpd8hufCe87ti+18U A3dkbFi3ntgFqyfnCKT08AgC4Ri+TB8Ywy/6FQt/CV/Xz8SIDhS8O/BAuWIgopE4 sTcQZ1VRnxzrdTYygVCMrdcGply3xY4VNcJK3JnnJjoNhgTcphzlWJSbuID3uvC1 8syWaj6e2TvHgqU6kDzz5KtF42VCJ5RqPUuPEC1oia8+Ajfwfv1WjJJpU2jkzf9P eR8jFR48hRd95/8qb8+IoemDOYEhSc3DB8N5QMsmC+F6VWQm0hYw0ajqxOzAfLfq UTNdE36Ekcg= =yxoS -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1ym9nj-0006aa...@franck.debian.org
Accepted ikiwiki 3.20120629.1 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 17 Jan 2015 11:53:33 + Source: ikiwiki Binary: ikiwiki Architecture: all source Version: 3.20120629.1 Distribution: wheezy Urgency: medium Maintainer: Simon McVittie Changed-By: Simon McVittie Closes: 774441 Description: ikiwiki- a wiki compiler Changes: ikiwiki (3.20120629.1) wheezy; urgency=medium . Backport blogspam plugin from experimental, because the version in wheezy is no longer usable: . [ Joey Hess ] * Set Debian package maintainer to Simon McVittie as I'm retiring from Debian. . [ Amitai Schlair ] * blogspam: use the 2.0 JSON API (the 1.0 XML-RPC API has been EOL'd). Closes: #774441 Checksums-Sha1: d7201c09a38019e6434f0202ed95a28550312230 1794 ikiwiki_3.20120629.1.dsc 5b446f538a85608d84198c7b549188c64a7d849d 2776303 ikiwiki_3.20120629.1.tar.gz 6444feb5886cecd90e681761a5ab106eb1ba85b8 1812852 ikiwiki_3.20120629.1_all.deb Checksums-Sha256: f1556f3896caeef3937481216094be384dba17f89c93817b2d0c8ca4d9b1adcd 1794 ikiwiki_3.20120629.1.dsc ad078dcd39af175ac911cbaf1dd00995cd3f4039cceeec3652489d048346568b 2776303 ikiwiki_3.20120629.1.tar.gz 8c4f8faef9a0c228efe3ed2cb59a5459416f1a32d38d2f5af6da3e6664b4467d 1812852 ikiwiki_3.20120629.1_all.deb Files: 8611c003c89fcc87a3c688ee7c6c905e 1794 web optional ikiwiki_3.20120629.1.dsc c9c8c6d5f4332814c6bc373a29d2bdef 2776303 web optional ikiwiki_3.20120629.1.tar.gz ab61ad698359c845a0bddb7735d44a65 1812852 web optional ikiwiki_3.20120629.1_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBVLpQNE3o/ypjx8yQAQgUXw/+OCQbAlH//bKYwwt78p32rDiVyEi0RJnf bKsTyn3Os67Z99FmJu9WAQL52XeAPJjRRQLGC3OpEiYbA0XRG1UpqomGwqlmWAWX ACIOW9ReOLdGSitivMzvJO9s1q7R0vDrIv6BBLIPRKghL2f+y+YCSg9TAuXRTgZV YpYaZRzQA/BGUO4GXFGrmayxc6ASddRNTaFDDplw1OEdU3JgkP6M2dSEEeG39s8A qdXFa3l5NqyUrD7eH+9U320ktK6NsF9/y9FcI+QhKMzREN7UTQFOG8rtu5HYCDrn OKmgp1hr0Mq/azDDuWmB3AfUAgjcNYOK1U6lqb/CFa0ojZSidwWsKDO0/Njqjje/ Y6wkMd8efNOfu+fhomZ5q19f+WWJY2VEYGXWy8sJ2DMblSZg0Shl9CXPmyPtQu9L aRTSYSvu59dAdiaTBnxneXO+qECGx5sf7ZEmo/H6qWKyXCYh+qg0YDmO14nmWrpQ dXNocfJTqgQeqCdRwSW9pPBzNEW+9w5Kh/q5tt7M5EbjK9eoECpHwxH3XqEpCE/0 pI6e86FhE9l8hHwRSPrNVD9WJzDE8nvwSIBF+KSceFtiJE/5fw6WeZZJTQkbWLSZ OBcu+YH1FjEX8o4wbyqzMCM2DbMdUMsZqtLZ4dh32VrM0zgkxC0fvM7pZElT67su vmQFgucghHw= =PHjP -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1ycvp7-xu...@franck.debian.org
Accepted dbus 1.6.8-1+deb7u5 (all source) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 24 Nov 2014 13:49:52 + Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: all source Version: 1.6.8-1+deb7u5 Distribution: wheezy-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Closes: 769069 Description: dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus - simple interprocess messaging system (daemon and utilities) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.6.8-1+deb7u5) wheezy-security; urgency=high . * Fix CVE-2014-7824: - Start 'dbus-daemon --system' as root under sysvinit (it already starts as root under systemd), so it can increase its file descriptor limit - Add patch from upstream to increase dbus-daemon's file descriptor limit to 65536, completing the incomplete fix for CVE-2014-3636 * Fix regression introduced in 1.6.8-1+deb7u4 (Closes: #769069): - Add patch from upstream to restore auth_timeout to its previous value, since the shorter value causes boot failures on some systems - Add README.Debian to dbus package, documenting how sysadmins with hostile local users, and systems where boot succeeds with the shorter value, can get the shorter value back Checksums-Sha1: ddd17c791742e66fb01eb6f8f1157d758a4bf65f 2585 dbus_1.6.8-1+deb7u5.dsc f2c4ea3c8b8d48504df92439f3a73e130c6dfb7a 49624 dbus_1.6.8-1+deb7u5.debian.tar.xz 11af121c453fd729c2274fb9511a07b3d5c30480 2293984 dbus-1-doc_1.6.8-1+deb7u5_all.deb Checksums-Sha256: 774f9812dfb9d288c4afbd89555743f8ba8ebdd8ec66c53b30bdcfd0c0bc70c5 2585 dbus_1.6.8-1+deb7u5.dsc 884e1811c8ee978f788904f788dd7ad22398e1a41334d69b7ffa46423d3d816f 49624 dbus_1.6.8-1+deb7u5.debian.tar.xz dff00029bdb7021c89fa52526016979f4388dc76ecea771637786ccc04298c86 2293984 dbus-1-doc_1.6.8-1+deb7u5_all.deb Files: 82d13a3b39c4925814bf18b564a5879f 2585 admin optional dbus_1.6.8-1+deb7u5.dsc c2b5cdf453071fea1eedff1657c28d84 49624 admin optional dbus_1.6.8-1+deb7u5.debian.tar.xz 58ae23dd5b0d0d44ec0913bf72c677cc 2293984 doc optional dbus-1-doc_1.6.8-1+deb7u5_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBVH91h03o/ypjx8yQAQgNwA/+MN62DAy9BHIk85HqrFFfE/ndva+bJuj6 2fP/Gn6Mq1dBWO3+BsbLWTnmAdHMn521KxuOsv4Q0GslOkgJExjYEqmRhtUqbW/d AZDP5lrPinDTROcIfNWPyjvEMVv0E0JPBGi+SsbSVDNQSQJjNotj+PFmHWC7WiUL nbdumOFxdaRTPhnqRJ07oY33Oww7irnKpawgJZET5AoyeXAHzn+zCT8sfxHn+Mph sFvNG/hLX6E/3gpF2zedyvIh7N7hw/HuzA0xfX5eJGCPeq7xkVjFFsPzeMgFWzHM xwzv6FlLZFmH7MBWr2S7FRp4EN86LBVUirSufDLuJeZxyNxY5ikXDGbPah0wMD0w 0RgKQoWvP4xdAtZh26OTCgAVy8LuFa6ldBKZHRe5DsdsaN+5XGQ3BdN9M0a2sm6D xamsgdXlqSLiQx6XlwVxM2gUwXLWZ95Vnl5IMp2MclwxURA0ylDRmk+BhP9Pmt7h mYMYtHLqTGeeGgSUpo4vcqedCsIkg3+jmBOXC+YvC5YhUaaYfhnByV267QW1+Otk QH5rGyKHQ40O1n82CPSRwMcLn2TuO+sXxRGdATix8cHCurbR31Bnzcyxx9Y6XoaI FEUPZk9uR628MxR4alFZ9zpSVEHvHXdNjXMFAr7bxrHc46/FC0dwq0aKh+wOcz2f QuOdEe5tklI= =EtO7 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1xzmap-0007sj...@franck.debian.org
Accepted dbus 1.6.8-1+deb7u4 (source amd64 all) into proposed-updates->stable-new, proposed-updates
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 15 Sep 2014 19:48:51 +0100 Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source amd64 all Version: 1.6.8-1+deb7u4 Distribution: wheezy-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.6.8-1+deb7u4) wheezy-security; urgency=high . * Fix several security issues - CVE-2014-3635: do not accept an extra fd in cmsg padding, avoiding a buffer overrun in dbus-daemon or system services - CVE-2014-3636: reduce maximum number of file descriptors per message from 1024 to 16, to avoid two separate denial-of-service attacks that could cause system services to be dropped from the bus - CVE-2014-3637: time out connections that have a partially-sent message containing a file descriptor, so that malicious processes cannot use self-referential file descriptors to make a connection that will never close - CVE-2014-3638: reduce maximum number of pending replies per connection to avoid algorithmic complexity DoS - CVE-2014-3639: reduce timeout for authentication and do not accept() new connections when all unauthenticated connection slots are in use, so that malicious processes cannot prevent new connections to the system bus Checksums-Sha1: edfb1e042e124db574c0aae5fb2963fdea2936e6 2535 dbus_1.6.8-1+deb7u4.dsc 608b0fcc08fc99f3274636e093d702dfd838c8a4 52078 dbus_1.6.8-1+deb7u4.debian.tar.gz aff5819cd99c0bb0ae4277c3ea9df28e6e7108e2 400028 dbus_1.6.8-1+deb7u4_amd64.deb bd7321d3436b95eaf1d97d92b6a3669434ed7ab3 59350 dbus-x11_1.6.8-1+deb7u4_amd64.deb f26f2d24ef3ff101cae23920411c4981fc0e2ee6 172600 libdbus-1-3_1.6.8-1+deb7u4_amd64.deb 299b93d6614895f83988991e8528b15bbef0b91e 2292644 dbus-1-doc_1.6.8-1+deb7u4_all.deb 17a8b931c3e18049788c4363494c755ac46d4d00 247302 libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb cadc372b79426958347917ab73ac5b37f4116112 8301164 dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb Checksums-Sha256: d6530499a91c420ffcd371c311baba464ffbcf15a589a20869b27308a0f8a456 2535 dbus_1.6.8-1+deb7u4.dsc d5af1015a5876b863276829f1cfd0a0b419a49011748e265ad2dab0b3b02be89 52078 dbus_1.6.8-1+deb7u4.debian.tar.gz 894bf3308448e7ae8b713f23ca973710f70b7cea6e046b666739acfd6d29181f 400028 dbus_1.6.8-1+deb7u4_amd64.deb 196bb9d2e3b47da043c81c13f7ace8732493873b919e921e625efa358aec9f4f 59350 dbus-x11_1.6.8-1+deb7u4_amd64.deb 5d956bf89dec4c11be4f7dc844fa82fa9456f35b510a0ac6fd8b16af51c2aea7 172600 libdbus-1-3_1.6.8-1+deb7u4_amd64.deb af721f08a55300db64af57a1a7dea4b22fef8c3839a5352fd64b4f14484c6e32 2292644 dbus-1-doc_1.6.8-1+deb7u4_all.deb 05cbefca3f2085d96355aff1517d6bc9a794b82ef64f4348b73976d8f8c68aad 247302 libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb 0f2f7d12da1677c2e96c187bc45346b19d8cacac0f5c938d0c878b4aa635d56e 8301164 dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb Files: 55c66ea492381d8038515dff9e51c2f1 2535 admin optional dbus_1.6.8-1+deb7u4.dsc 37f4d8804b7f7298d1a83ac68ad06e53 52078 admin optional dbus_1.6.8-1+deb7u4.debian.tar.gz aa78f6477b8a8e7ebc03e70eedc32c42 400028 admin optional dbus_1.6.8-1+deb7u4_amd64.deb 620e596398e9bdae931137c820e14f5e 59350 x11 optional dbus-x11_1.6.8-1+deb7u4_amd64.deb 7f0631acca3501f64b7ad3ea22b8e1e7 172600 libs optional libdbus-1-3_1.6.8-1+deb7u4_amd64.deb 16646197a3c1873bae9b7bdb8b8f 2292644 doc optional dbus-1-doc_1.6.8-1+deb7u4_all.deb a9700db097147bec46bf1170304cc22b 247302 libdevel optional libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb b017f1bb94e6743f26515a56200b7d7d 8301164 debug extra dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBVBc4VE3o/ypjx8yQAQiQDw//bPClbDtRsMy30JZSGVPyjjHyjVf5ZzKw iCM+/zeYBDwDNuIsKBoBdZzM/VDqbx5glUo8d0GkFm/C8ag3iyyi0FacxBYiYHo1 oOjjIfOifIB38G07JVNiyS9Ez9yuvqviEyr2briWA2BE3EvNZknR4OYdGowitKDQ ZoZcwjy0OZt3ot2B5YZW5dCVeDIUIi5aT2NVlrRim4Cop9tmCh++hRukyn/AMcbp uBvwtpmacSggMoOYqT/9n7HvRe4fLJsZC/Zk1fi7P+btylvZP7riIpC0EUub4obL R+c4EBVcE3XjeB8Lx/NMXpKug/g9bhhvND5/WKCUCH9MWENXIUM8STFCAnlKBkhV yDoo+IDWfi8FFobVDs+FY1JHZ3IyN9vVnxtLOU+UWVnA/GiQKDNmcg/lDeRuFWxj PQG290qf3OwyUnsjtPTDOQtfhZNDYSeBG8hIlHM0XEJ4XYNIhd/vsGS9m8d3BOWh lfzRBbkXnE5gFY3n8lr9pGSWAlPLGS5JDhfSeqtF74eczd47cUFJm/tCfcutNtbb dd7QcnYE0za+RU53Dn7K2zLPI0qgyQrr+saP61ukUi9JqoQ1PebBu7Da0XhGsfa6 wkwsyUEeDYZqkkYax6W2QkCP10U2TfC9LDw2n7R50ALv9cUU+/eNWOHTTPeZnViB cwtCqoghYrY= =Hcud -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of
Accepted dbus 1.6.8-1+deb7u3 (source amd64 all)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 30 Jun 2014 15:19:25 +0100 Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source amd64 all Version: 1.6.8-1+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.6.8-1+deb7u3) wheezy-security; urgency=high . * CVE-2014-3532, CVE-2014-3533: add patches to avoid two separate local denial of service attacks involving sending file descriptors to system services Checksums-Sha1: eae19db12443455fe04408ac0b9130a09cd09870 2535 dbus_1.6.8-1+deb7u3.dsc 3385d6058f8be043c484d7c019a63cafd92a2a37 39434 dbus_1.6.8-1+deb7u3.debian.tar.gz b5e8e233f8fadcf11fd92d6d461ce8212438e0f7 398872 dbus_1.6.8-1+deb7u3_amd64.deb 09213315bbb247fd4ef0cd0d6f7fb9d8bd9d158f 58998 dbus-x11_1.6.8-1+deb7u3_amd64.deb 848fcaf11a232d6a0ebb6b6c6d02814dd0fb7414 172046 libdbus-1-3_1.6.8-1+deb7u3_amd64.deb 85e326e8d38a5b0dd05fe95855692a6e6aca6550 2287234 dbus-1-doc_1.6.8-1+deb7u3_all.deb 46110a9ece1aa71033e840be9163f955401c5e27 246442 libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb 8e45553348fa26596426451cc6b0004b38350cfd 8284268 dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb Checksums-Sha256: ad879cfc34a7040ac3195cdf6e74059a61e1f79cb085257c61bc0586a6a3b08e 2535 dbus_1.6.8-1+deb7u3.dsc b26f704c955e453ecdcb5c6be8233bf7c15817c87f6c5fb600a73cfeddb063b5 39434 dbus_1.6.8-1+deb7u3.debian.tar.gz 6de730e6ed44e09886ef33e5160c298d76fb4cf35de4e97b62842bf33eb92e1f 398872 dbus_1.6.8-1+deb7u3_amd64.deb 6b035d3492bdb8f78f2d3d5066e1e4c11d227763a8f3192b417bfccbaa8bbef4 58998 dbus-x11_1.6.8-1+deb7u3_amd64.deb 4bfccbb32e71e6d9e9e3932a5a6cc237100e94839327e7a956793f0d3caf3a6a 172046 libdbus-1-3_1.6.8-1+deb7u3_amd64.deb dd877e7a85988990edb1cb77d1a9250d7b29cce2b60038481f30aba9803f0dcb 2287234 dbus-1-doc_1.6.8-1+deb7u3_all.deb 0615ff68218bcc89f3e4ee42624a55288bbe468ddde45cf1d327be1a1d15cc39 246442 libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb eda53a76c0755718e4d9aaf90045282ec5b7f8e348659bc3665e74c938ce196d 8284268 dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb Files: 6a538a48859a06f4df247407b0d101b3 2535 admin optional dbus_1.6.8-1+deb7u3.dsc a57f1f5839d3eb82682c5a9bdd6d5d16 39434 admin optional dbus_1.6.8-1+deb7u3.debian.tar.gz 00dcc71939f1061a7fd34175b69327d4 398872 admin optional dbus_1.6.8-1+deb7u3_amd64.deb 5977d43bef972c321c8d98396b118574 58998 x11 optional dbus-x11_1.6.8-1+deb7u3_amd64.deb 9cec0a9f08314cc6cdae22bdde8196e5 172046 libs optional libdbus-1-3_1.6.8-1+deb7u3_amd64.deb 10267bb96f0982be29f8b6ab84a0be3c 2287234 doc optional dbus-1-doc_1.6.8-1+deb7u3_all.deb c815d45afa0d95513ccc07f32962419b 246442 libdevel optional libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb c309a7147eae5a3713a5df3bc6bdb720 8284268 debug extra dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBU7MY0E3o/ypjx8yQAQg3Jg/+LhjrVPLmuv521WrrQVZzZLoitCEt5dyH EYoiCZE8LB9PMiahyiKDIEseIh28lGfpGSoKcADn3bEAQESo664+t+ECkm/bJu2w qovxUWdJsCdbN2YsS9tBelEe+hJk9JELsnIIvupVzF7hXFDJJhmpHsiM6b4Txiyw 1CuVLdQoWuqJzQrlMoJhJ8qRu0/edNnTiMIBFsPCjeqq5H97aAyuMTQz97OdLmWH R3NAiypFOHqm2UyRiO+mxV2NraSpr6r1q1dnncpXoz6f9OSscPaYP59m86WsujsC 6z8cjaq8jpfAcC751d5fBX18mFNJyQTOy3xKHheiozJN9m+LujZB6TNvxOSScs+x RM7A6yZ+jit2I8JDaP0moyDcptFoEpGQERXs+GuFMRQ3G9wwTgeSWvbgzhv6c/lD ckbAM9jpCBA+Oa6U3wdWEJvlFa4sGb3eE4cjsK0ugXIAnprvuJCu+y91ls5KOrzN njSlIavDC+/IjZz91JDGl4/WitOdvMnOZ+APdwDo0ie3WBMHy270bIfKnByBXEf/ HVeqf5EHsCxxoXKog/07IC72+bcQ+VEKA3qfBnH6d4eMHIzfmmls8+GRVuz2to4q /uoTH19niUbqniebUvq7TVOy0y9YEKEqYiEYyucx3oP2e63/dxNyeJ1eOO1hEH5S QyQjAuU/26U= =qZi6 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1x2yir-0001ud...@franck.debian.org
Accepted dbus 1.6.8-1+deb7u2 (source amd64 all)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 06 Jun 2014 18:40:22 +0100 Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source amd64 all Version: 1.6.8-1+deb7u2 Distribution: wheezy Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) libdbus-1-dev - simple interprocess messaging system (development headers) Changes: dbus (1.6.8-1+deb7u2) wheezy; urgency=medium . * CVE-2014-3477: add patch to avoid a denial of service (failure to obtain bus name) in newly-activated system services that not all users are allowed to access Checksums-Sha1: 76c0d27e17a38810920ae75a8502e67be0c3ca9f 2535 dbus_1.6.8-1+deb7u2.dsc 25b5da8701edfbe01dad12e5903f58cd913d08ce 37099 dbus_1.6.8-1+deb7u2.debian.tar.gz 98e53ec8a27166528e0e25a1962aedaed0ba89bc 398768 dbus_1.6.8-1+deb7u2_amd64.deb 32ec4569038809cb39903ebac281b2f4b5bedc9e 58942 dbus-x11_1.6.8-1+deb7u2_amd64.deb 98770f3721432607d74c12fc1291e309e8cef59d 171962 libdbus-1-3_1.6.8-1+deb7u2_amd64.deb 5ed1ae94d1053fa8e37c48661ce741690aade331 2285690 dbus-1-doc_1.6.8-1+deb7u2_all.deb 72e1cf038b4e43c442696088e51b2610048c0458 246344 libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb d664830228858732fd0deb985ace02d3653d071d 8280904 dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb Checksums-Sha256: 0930c4b86c08b131b574019da6bf133fc11c5bb0d3a648e31e062494f8814093 2535 dbus_1.6.8-1+deb7u2.dsc 9e4be554e4cab3736bf8e5107b4ce950316d53a6e4be3085552d1a4208392fc4 37099 dbus_1.6.8-1+deb7u2.debian.tar.gz 9ffe01b36447aeff8c1f4969a756fa5e85d3ff33126dd45f16df8f2419a8626c 398768 dbus_1.6.8-1+deb7u2_amd64.deb 708d57b0aa35457f63f75324079617bd9c44637c8f59a4a5b4ea44e1cdf73d34 58942 dbus-x11_1.6.8-1+deb7u2_amd64.deb 849e8e21b4dc21c731e9d9cbd6ee4c1cce3c30701bb2b98915c39c87a672f51d 171962 libdbus-1-3_1.6.8-1+deb7u2_amd64.deb 74dacae2dd28a5d8d2cb4ebebed8295a2ea9ccdb0eb8fce951152616223e87f7 2285690 dbus-1-doc_1.6.8-1+deb7u2_all.deb 73447d4dc3232ed64fb45db7f614c3f7bcf8fb559a65afaa95049cefe0918208 246344 libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb bfa369a2658b1ebdc22127d47c62083a1eeeb0728219059f31ad054fc3f5cb9f 8280904 dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb Files: 4e528cb46912917727af681a971f4ac9 2535 admin optional dbus_1.6.8-1+deb7u2.dsc df997ad45656ca32dddfc24bd900a96c 37099 admin optional dbus_1.6.8-1+deb7u2.debian.tar.gz 91fa6c470dba5755a92702ca90871d0a 398768 admin optional dbus_1.6.8-1+deb7u2_amd64.deb d39a48fbce14982ccc59cbfb60d0ef49 58942 x11 optional dbus-x11_1.6.8-1+deb7u2_amd64.deb 77fcd7cd37172e5ccfdbb572682435d7 171962 libs optional libdbus-1-3_1.6.8-1+deb7u2_amd64.deb d751b107d6f7e37c67a7f408c9d391fb 2285690 doc optional dbus-1-doc_1.6.8-1+deb7u2_all.deb e69d7524d8e3397bf7466cc9273dad81 246344 libdevel optional libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb c141697d71af378f5891f1180aba 8280904 debug extra dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBU5n3y03o/ypjx8yQAQhsiw/8CmoUd+3uADG9y5WCYofTfPx65OxDCkJL 1Y7jtAmXawuU9ITfabJP7TUecsrwMOB2XL1zNyWQUuRbbOLsqqDQCpxK8qfGhXPd zmnfOxro/sMXWycz1zXjnsED00pPh4EnSbb5vhcWzGPsaQbFjBmIw8YwcGd7AquZ szavZPiQ20SxgLPYH2/NXGOYD8KPaEgoQ9mkG/oD6ihxLI2Ya711m6vFautRjz25 p5wgcUIl4glS7UOaej6dxHqkvSNWJrBNj4aA7fi1EtEjB3EJeDgTwhQ16aeauID5 klA7QfmTygAQ5gqBrN5Vqy1trXJUECvDrWPGNJ347wlkfwUssoX38ZY/CyWuCExo uhKqvQNGxFI+k9YKYaNTdmaZf7DCz1P5eClPGvSrsuhQRcUPrWBgsqIvUtu2KNOF U6irT4G+DRpabO2fiV8Ii05zTmWsYMhCOB7vzjchuuj1by2mksvc52tzBnjsBka3 OxU4p7EUMhcNBnVRtLjvzBWvwbOf+vpRwrNEBtBZu8Hehz8Jn2VkAE8yXMtt+cp6 RQsxjdp04pfHP+MPcFbZGQmmGgNckenlMIedAWLZZ2c/orn9z8kfKFIvO9fwFoFq ma0tCI3+KJaGmWZkY+KopCY/3kNxRlKzkryd2JIf2fAMXj9OOcx8YspAwSmR5hHl S+2yohIeeCc= =f+ji -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1wvd4o-m0...@franck.debian.org
Accepted mp3gain 1.5.2-r2-2+deb7u1 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Apr 2014 09:06:57 +0100 Source: mp3gain Binary: mp3gain Architecture: source amd64 Version: 1.5.2-r2-2+deb7u1 Distribution: wheezy Urgency: high Maintainer: Fabrizio Regalli Changed-By: Simon McVittie Description: mp3gain- Lossless mp3 normalizer with statistical analysis Closes: 740268 Changes: mp3gain (1.5.2-r2-2+deb7u1) wheezy; urgency=high . * Add various patches from Daniel Kobras' mpg123 packaging to fix buffer overflows in the embedded copy/fork of mpglib - CVE-2003-0577 (originally #201698 in mpg123) - CVE-2004-0805 (originally #270542 in mpg123) - CVE-2004-0991 - CVE-2006-1655 (originally #361863 in mpg123) (Closes: #740268) Checksums-Sha1: 4c8842c052b7dab2119ffc5a544c0f0c046a748d 1897 mp3gain_1.5.2-r2-2+deb7u1.dsc f58a5cf1e05e13998b22336db17d3dce941097e5 16606 mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz ae27beba140e4970729e24518315b278b60a8eeb 74834 mp3gain_1.5.2-r2-2+deb7u1_amd64.deb Checksums-Sha256: 5be6134d232093453b7811a801587f099aa30d7b60a2b0b11bf45588a91e160f 1897 mp3gain_1.5.2-r2-2+deb7u1.dsc dc9cfb38d3c0c59b08a1ae5ac7cce19aaee12d0e51e95fe46ae7c8455572a66a 16606 mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz ee2db8322eb3b36b5b76f5da854ba862dc179d70b88c2ad54282736b40213021 74834 mp3gain_1.5.2-r2-2+deb7u1_amd64.deb Files: 9ea1b90f209dd40c0edf2001041ff57a 1897 sound optional mp3gain_1.5.2-r2-2+deb7u1.dsc 09b51103224f68755b588636b64350f4 16606 sound optional mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz 67146cb370935a355da4b238c2064331 74834 sound optional mp3gain_1.5.2-r2-2+deb7u1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBU0mqkE3o/ypjx8yQAQivqxAAgqbM2g9htAdWK4MHQj2KMDd4520N9L9w YlMUZjoVccHLT1n8vVFhTxUVreiOi+SOkLMFuyDbKidOUeEjFKkpy8UVo5YNPNF8 Bm89Xhg44qL9vPpnz1jalO3P7Hj1LpbryxoNrqJXSRiGJ1EcDxIDbVJ+iJCEFzcl 3Pse0lrsa4J97/F4DHaSxrf4aWVzYgvKTTfD2nhxOd0qUq322NrNkF4WOIBOPO9f rXuadOuINIiCqVOTptzBmTyaRoJImAFSMgunnhXRnGzClA9aTFhneWdY0jhM+PN6 IhOrF0TYb00RHp8z/5uAxWohYa5VXZl40L19vt482teqM0U/C56vAGmI2NZUfuv6 m0GV7hpwdYV/FVngCKuc/Pbe2JdBHN3U+gM8ka2suvWz7B6kVMXNtrrJtfPvg3/3 t959srdcTK9SFCT4mNpJms89AJRPt9sOVFJpctkWjxQt5z+9NqPkOPAwc6vSUQG8 wEp3hAeI+D8DH01H/aaFRBeU12B6T7plpwidFW24OqUAId8RopWgQ9OV5dPxJa8a 1WbbGR0BVnoAjPSKIF7gSnlLDt9z9CCoHRfYmPrJ6z1mXCotKw4F2i9RBtull4ut EozsTXPN3CdXO2yiyctS0Mixuibm5OdBwX4WfyVpsddOEbe6jcpRj8cxqdsawlx5 q7D591Bkq8Q= =p2en -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e1wznna-0005v7...@franck.debian.org
Accepted telepathy-gabble 0.16.7-0+deb7u1 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 24 Sep 2013 11:20:13 +0100 Source: telepathy-gabble Binary: telepathy-gabble telepathy-gabble-dbg Architecture: source amd64 Version: 0.16.7-0+deb7u1 Distribution: wheezy Urgency: low Maintainer: Debian Telepathy maintainers Changed-By: Simon McVittie Description: telepathy-gabble - Jabber/XMPP connection manager telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols) Closes: 721883 Changes: telepathy-gabble (0.16.7-0+deb7u1) wheezy; urgency=low . * debian/gbp.conf: switch to wheezy branch * New upstream stable release - drop patch for CVE-2013-1431, fixed upstream - work around Facebook server behaviour change so we don't consider its service discovery response to be spoofed (Closes: #721883) - fix potential FTBFS in highly-parallel builds - initialize libdbus for thread-safety, as a precaution against plugins which might use it in a thread (e.g. libproxy GIO extension) Checksums-Sha1: e44d7a5456a31194b021ba3dc3d0dcb20588acfd 2507 telepathy-gabble_0.16.7-0+deb7u1.dsc 17f8c0d6ee95f7a6489962c1473bbd4f18041cf0 2429292 telepathy-gabble_0.16.7.orig.tar.gz 55c904557acabc82755766649e819df96af7d4f1 13043 telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz 68c2d3826f634d77cb9400eba594c32a5447ec68 821016 telepathy-gabble_0.16.7-0+deb7u1_amd64.deb ef28c50bd53f84881ac2999e66b52e970f33e8cc 2130458 telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb Checksums-Sha256: 3a3386f3e34e61da5bf0513771044764bf20682ea020d18c4ddf08e5caa6d9e4 2507 telepathy-gabble_0.16.7-0+deb7u1.dsc 78bda66e0cba42674728bf7efdae91ed576767ff5985a6a05bb9be195ce0c9bf 2429292 telepathy-gabble_0.16.7.orig.tar.gz e1164c741691eca645c0875eaf7f809dd827721dc9748ef0b05ff58f541a682b 13043 telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz 109b0549baebb4cb0b35fab8a223c94a32fc598c65ee690e6aad12718dc5975e 821016 telepathy-gabble_0.16.7-0+deb7u1_amd64.deb 6354643f7bc31f62103f1bb6e4f1a6db709607a1b4a7cd480565e8c3f9f1a885 2130458 telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb Files: 2e2aad2c88e73fc1e07770a6b9cbe232 2507 net optional telepathy-gabble_0.16.7-0+deb7u1.dsc cde7a9cb17f3f0ba22953128da3c48ac 2429292 net optional telepathy-gabble_0.16.7.orig.tar.gz d0cce9324621d919a2737dcb8652a0cc 13043 net optional telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz 36d3fb5665aefd2d005958a525ed170a 821016 net optional telepathy-gabble_0.16.7-0+deb7u1_amd64.deb 91456f644bbffcac08e38f610af0136a 2130458 debug extra telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUk3CK03o/ypjx8yQAQhbsw/+K0i91gphiPN4XfvX/p/QmWwbjS+F5qSz 48jR2R/wss0O3YwcrTeOKhQc61uCgDu1Spd4hOKvT7NH+n81NkUdxqRjE/cLD+aP yqQSwEnlH96ZtrCg/J+u3k44qddAECjsv3IjKXxF3w95WdNiqvddDID3Q4vSvRAj dA1iDSiCfAh6NRq2pZe7ubXCZVzhxZY6P58SVM3X8aN/4qX/dDiksd6EEpNlhD/I pAcooGVVXv6jpbr+sxhqMCAZYXP3WyPxH1PKcNwouGL2GckxfsxdMOiiZlvGJGlX 7q70iOUbhMXGzZcJHg5l0n4rpKXqylfMTuqq2AaIu01782bfYShz6MY3KDo/QwKW K3G0Bnax/KkU+xsnn8QSj/0dIledzfnAGDYTaY3P1+UlYnrCnjEZ8B4Xx4wub7rb eTw9j4mR5Ayt9FWrWoxaCkDUzERIGf4MM4FRCn/Y8hAAXdE7y/yPFAJTvDQXVvUS koGBjJ0LniPCbKg0DOq/baYc0fHC8hi94YL5yXdUSPFwiaWKecLL19NkyM1Ct0vC KnzU6RMLvJcwkNjgH6CyihBie1pHIjfX5onDyrB0/D2XUblN1tV/LNZJ4pBRtpdu vPmdhD3iSTgOv7cy3vxq548GIcAlMklHvGuAi7JeDY+DkFJuhOcMC/PDHdhEAM2u ka0YevU8p9Y= =+xdX -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vrrrf-00061a...@franck.debian.org
Accepted telepathy-idle 0.1.11-2+deb7u1 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 16 Jun 2013 13:26:54 +0100 Source: telepathy-idle Binary: telepathy-idle Architecture: source amd64 Version: 0.1.11-2+deb7u1 Distribution: wheezy Urgency: low Maintainer: Debian Telepathy maintainers Changed-By: Simon McVittie Description: telepathy-idle - IRC connection manager for Telepathy Closes: 706094 Changes: telepathy-idle (0.1.11-2+deb7u1) wheezy; urgency=low . * Validate TLS certificates (Closes: #706094) * debian/NEWS: suggest the telepathy-idle backport for users who need interactive TLS certificate validation Checksums-Sha1: 6b6af4926e796a313d470efa8107ae3f1e8618af 2292 telepathy-idle_0.1.11-2+deb7u1.dsc 60c50f838ae6012f13ba53702b9498633bf0d41a 7261 telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz 05a79dbefc65757eb2b4d2d9a66dc67c5d7519f1 118216 telepathy-idle_0.1.11-2+deb7u1_amd64.deb Checksums-Sha256: 1e727c9ce6f1116e708f70b0d9d4b5a389951095b1a3a02f9e9b2da4c2499759 2292 telepathy-idle_0.1.11-2+deb7u1.dsc 9b5ccaca97af19425990c6909fb1512457ce42ea675926e674280d59ba11d8e8 7261 telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz d53557a60a56efdc747a31b659cdaaebc9c5e26e2ec210cda4aff37758967f29 118216 telepathy-idle_0.1.11-2+deb7u1_amd64.deb Files: 7621ba08744c21e45a9637017b699ce2 2292 net optional telepathy-idle_0.1.11-2+deb7u1.dsc c74045cfd73147b7be1308e6d8daefc3 7261 net optional telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz ae958d4a92e1baa97a92b60d56f419b5 118216 net optional telepathy-idle_0.1.11-2+deb7u1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUb22Y03o/ypjx8yQAQigtA/+JrRdNZMYGkbasOc5hHK/967yOSWHz7H/ UVxAubwwrVFdy4vIvlZrVc80UwFDlPDFAYB+LEWVpUeLbKzfPW6Jdj6pehnvMQyr +DmosoE3cCmdyWQ9GWNdzhjvIkGqjoVJZtCbn80gZBBbT6ctgwfhyRaUk85ifk0t B0jcopLSNkEDQJ5jHHmkWXBiSMdR6ciFB+UN5jdSMVm+WR9YpRzm3cdeIPtwv+F7 R0sW/mRw2xjSkhRrqeDGq3/ggtKq7Ny4ewn0Xakg3kZMgPCPZYatkc/Y5ZEwUVAF ccFtg2eHxCyhtA7dbOuiM2jDyu1DMOc31Dv5uz1x3guweR65Yrct1PDY24H7EXKH IdFwXuZ3o6GZuz78iMruL24zpWlpb9RW08o4qPBhd0k3bTNM0luczbLpP2cXYKKL YFXSw6+hIjoLbF8mt5q9J5dncrNFIvX2ZaVQ5a0W3eBMby58pBmSQbqghYsfsbim poVUDXPEc+Xe7w66hsZp/7b3tbw3jeYua6LJnG+/3Y6hsloQXGCuXqp3kHs5R65J XKjPbPXxxchHe7wjnEFdQ+L36y4oJha+RI8l6AThicW53NIZZIEKHtBBKbxlehMP giz8V+08GF1IPuchGr9hYMx7NZOTH/UQCA2HhuuYmCmhitc9vLmXMqbBeHKgOSBX hPHZJnRpbYo= =Ao3B -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1upnad-0004cv...@franck.debian.org
Accepted dbus 1.6.8-1+deb7u1 (source amd64 all)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 12 Jun 2013 21:41:24 BST Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source amd64 all Version: 1.6.8-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system (daemon and utilities) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system (library) dbus-1-doc - simple interprocess messaging system (documentation) libdbus-1-dev - simple interprocess messaging system (development headers) dbus-1-dbg - simple interprocess messaging system (debug symbols) Changes: dbus (1.6.8-1+deb7u1) wheezy-security; urgency=high . * CVE-2013-2168: add patch to avoid a user-triggerable crash (denial of services) in system services that use libdbus Checksums-Sha256: 5b18d2ccaf6d2ed539703df5e7c2ed1085a8379618e2bb07167c1c6787cb60f2 2535 dbus_1.6.8-1+deb7u1.dsc e34991ad02b2e58463f01a026001cc8dcdea9608f96c81fe113d85db22c70548 35196 dbus_1.6.8-1+deb7u1.debian.tar.gz cd8c666ce9534874c72564915032e2e93cb37c7a54964adce71119268874ff0d 398906 dbus_1.6.8-1+deb7u1_amd64.deb 02c399bb8fa79980e3c674936abbd2cb2447cb6fe1cf1109b8d3e17ed9779344 59638 dbus-x11_1.6.8-1+deb7u1_amd64.deb 4e6d5182a97a1c919ec0c1d06216184bb44d6c49ccdbddde11ca7364c9a66ae5 172578 libdbus-1-3_1.6.8-1+deb7u1_amd64.deb 4fe658595a0cbaace60a21c5101fd72b42ce611db683be53724346a1556d99ba 2382588 dbus-1-doc_1.6.8-1+deb7u1_all.deb 5eabcf8da7230c12f2600a29a206e0430214e2c940db28303a387c88e6be32e7 246440 libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb c81ea3afd9b6a37222485f63246f4c50b485b46432914944e16bd65e1464847c 8287174 dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb fc1370ef38abeeb13f55c905ec002e60705fb0bfde3b8d21c8d6eb8056c11bac 1929630 dbus_1.6.8.orig.tar.gz Checksums-Sha1: ee50b09e2fc3a41d3a8423bf9402c13bf69db5e9 2535 dbus_1.6.8-1+deb7u1.dsc f2460be62aa16ba45323e012e6d20deb54781d7a 35196 dbus_1.6.8-1+deb7u1.debian.tar.gz 4b4bd1831f62cc7c29bdf67a7f9250e0411cefb5 398906 dbus_1.6.8-1+deb7u1_amd64.deb f6ace975ecacb6ac3eba18c71ea67e48621ca2ab 59638 dbus-x11_1.6.8-1+deb7u1_amd64.deb 624f93ecd57f7a0d0aa36e2e7885203885206432 172578 libdbus-1-3_1.6.8-1+deb7u1_amd64.deb e3fcaeef65a7048f75753bb87b770268a2e89e3c 2382588 dbus-1-doc_1.6.8-1+deb7u1_all.deb 62da0f0f54290d5596280d047657bc2f6b319439 246440 libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb 46f95e9303381277f4afa18dea5e0bcdc0f9a07c 8287174 dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb d9634807d1de9b64727ae2178e3af2227fca0fca 1929630 dbus_1.6.8.orig.tar.gz Files: 310e4089986d6370f448788c4107e5c4 2535 admin optional dbus_1.6.8-1+deb7u1.dsc 82c6d69823b580a667115f4396d71858 35196 admin optional dbus_1.6.8-1+deb7u1.debian.tar.gz f6f7e34057d45c6c39bfd4013e25f967 398906 admin optional dbus_1.6.8-1+deb7u1_amd64.deb ec36563a39fc902053527ce2428ec4de 59638 x11 optional dbus-x11_1.6.8-1+deb7u1_amd64.deb b828d8c7ed9248206d59fd27bb0dd586 172578 libs optional libdbus-1-3_1.6.8-1+deb7u1_amd64.deb f4789325b88f9a2d5be8e36bb149a5ae 2382588 doc optional dbus-1-doc_1.6.8-1+deb7u1_all.deb 9b8ecddb155800e3b7714b5975bfc159 246440 libdevel optional libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb 0a479786e0035e62edc8b75a8b6a4716 8287174 debug extra dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb 3bf059c7dd5eda5f539a1b7cfe7a14a2 1929630 admin optional dbus_1.6.8.orig.tar.gz -BEGIN PGP SIGNATURE- iQIVAwUBUbjerE3o/ypjx8yQAQimPw/+KqobJY+XbHBVk4ZS4PowDp1W7J8NiybV J6zfL9uVpCnFyO6xg0fj0bialL4bhhWl8QajzLFEOhyYyB4Ph95/nEJchKMR2eRY GlQUtIelWcfvsHgzuxXfnlmoR0q3i2UztfA8ku0tZFsavFEA8RLg98dlwKAbmtSV cSWXnfNwSD1kn+rMVauIZE6aTGtVhJ9S9UUhNANVtGU1C99Jn/aWfltaz8dJZPry vsoBH9WOsH6JpCJppnANQJMeWcM1eIBLyV+jv//YQE9W9q7CtYq/A9Crt3zY8SUh UpGXJmJVsLA/HjOjSt5NUX/RMk5pR9vrz7/s+nWMIZfyEE5FvdfE061b/NumEWVO Mronbp2EDUHYM8dnXDSvG0FY/c3jxoQmHqdHQZ+qDLhhYrUPdRmhkGNVctOilPmX E2rJtXxbAJYpPgRNj9LMiptSvO6LGFlf+NUA0wHdjg0VNP9obrDmdBoEWh6gGUDk 4IUyEpjqS6QdyK0He5yJ/6skLcGRnjzoHi1rBDb6yr57tKo3fVgk+z9Ka0+5HDun uxUzImv4orlCYuJvpjkDqUnr5emOek9GgeG7ckyDINIBNaY2qANc3bWl9z0uWkTD 52KbfIuEMDPvCCDmsBGusAL6WAUWzeQJZsDs35b/JkV3JyyVUzy30LK4F51G/mQo I3bS/LRoCAE= =tECe -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1uohmk-0005he...@franck.debian.org
Accepted telepathy-gabble 0.9.15-1+squeeze2 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 29 May 2013 17:48:03 +0100 Source: telepathy-gabble Binary: telepathy-gabble telepathy-gabble-dbg Architecture: source amd64 Version: 0.9.15-1+squeeze2 Distribution: squeeze-security Urgency: high Maintainer: Debian Telepathy maintainers Changed-By: Simon McVittie Description: telepathy-gabble - Jabber/XMPP connection manager telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols) Changes: telepathy-gabble (0.9.15-1+squeeze2) squeeze-security; urgency=high . * CVE-2013-1431: respect the require-encryption flag on legacy Jabber servers Checksums-Sha1: d99dde7e6248101b6865008f789c04949e3b0be9 2402 telepathy-gabble_0.9.15-1+squeeze2.dsc 9c1b06be4b717bd4d3119264176de386a02d1c52 12481 telepathy-gabble_0.9.15-1+squeeze2.diff.gz a66be242d339e1addaf1989a2c033c1cd9cf9609 1197104 telepathy-gabble_0.9.15-1+squeeze2_amd64.deb 4051f7c5636d542aec7ff70c22eac2d7867f485c 1744920 telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb Checksums-Sha256: 1e8f0748a44e679d8e42b376adaffd49fbfedda3354521b5c31eda3b2a0bef12 2402 telepathy-gabble_0.9.15-1+squeeze2.dsc aa594ce021c9d1612d6e2f67a4f1ce785d29430108519f022ed505b61fd96f83 12481 telepathy-gabble_0.9.15-1+squeeze2.diff.gz 2e663e13b8c256a9265e09c5635403ce64789ec370bb1880e7f8e78766408fa1 1197104 telepathy-gabble_0.9.15-1+squeeze2_amd64.deb d38359b11552cd03f0a7d997c1398281b0116f02e160f7830d211826565234a7 1744920 telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb Files: 06402d3989b4e78ba649eb8fa58fd062 2402 net optional telepathy-gabble_0.9.15-1+squeeze2.dsc 1d1b2703f96ac00aedb9264612fbebc7 12481 net optional telepathy-gabble_0.9.15-1+squeeze2.diff.gz 01d30d862ed56845507a5d5de673a135 1197104 net optional telepathy-gabble_0.9.15-1+squeeze2_amd64.deb 72666484652192cdb35b0b45188633e9 1744920 debug extra telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUaZPR03o/ypjx8yQAQiZGg//dT4I5SCn1x3SgjEjomuijUu8aeeOr44W Ad9DA42RimLYEBeNV+y35EZEXtu7vs51bApyGr4Ps9fpKiEXh1I3wvE7dmItUOXj y0ycr1Bb7p0eBXYhu/CahhKXClppMWWsmFC3oDBxhAkwngeelCwLf/Vr3f7ba0ud MllOTNzbYIZLfw48oSyVbzOGOkduSjZ18ZGVx5bDfmkFFewcy6NHmGp3fdp47OsU 9dVBNzFsg8RvCzqlAEpX0t8sAkONt2SCELXGQTv7Ir4Q2yGvb6wsK4QSMLKU8bIv VlsNoow+xbgaUUtd666LELq/cjLeGRblnuwYy+aDEr5WbR5inwMvAdX9vCy5SyLr SO3OUt1L+Teh/aJ/1qdNJwXaFJr+yABmVD/kmKQgMY56cxdUiVLcVl0MXcS72ew/ 4kcHMU1ai+QXUFLeI9b3GUlDyXm3EpYUZVh9WqDuzC2UeNzB/6Y6rRwDxmg7AAUN 4yAwGb6d/pfY29J4vMoF/aENG+SQVOOHor0tY8nTLqu0s784X9YT1PUDes0EONhx 80WqGlX/qkoi2U9y22lrN3em12OoirxnGGFddG0X6QqOOEYer/wyM3T+v4P+/MpZ LFq3Trg8eoF2ZOUnKVchgC3S1MQtyHTeliEFFFdgLyWY9L2TVijzG2UTLm5JT4h1 SoWWAMhyPwc= =f/nD -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1ukmuk-0006fq...@franck.debian.org
Accepted telepathy-gabble 0.16.5-1+deb7u1 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 29 May 2013 17:35:22 +0100 Source: telepathy-gabble Binary: telepathy-gabble telepathy-gabble-dbg Architecture: source amd64 Version: 0.16.5-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian Telepathy maintainers Changed-By: Simon McVittie Description: telepathy-gabble - Jabber/XMPP connection manager telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols) Changes: telepathy-gabble (0.16.5-1+deb7u1) wheezy-security; urgency=high . * CVE-2013-1431: respect the require-encryption flag on legacy Jabber servers. This flag is on by default: to connect to legacy Jabber servers, either disable "Encryption required (TLS/SSL)" or enable "Use old SSL". Checksums-Sha1: 7f4a3529f382726975709dbc6057507a34d21e3d 2507 telepathy-gabble_0.16.5-1+deb7u1.dsc 6553fe69ccaa9926458d282893ad3d94ac9180e0 2635272 telepathy-gabble_0.16.5.orig.tar.gz 371fadde9c8717169286ec4c9ed81e15b10c425c 13609 telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz 71ae47810225e157f8d94f6868481ea9a061a61b 814368 telepathy-gabble_0.16.5-1+deb7u1_amd64.deb 5efd2b991e03241348f46664338bfda9ce0883e8 2126128 telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb Checksums-Sha256: dc24222da5014e363f3f7149760f511253c2a46a20e927896e837bd486b0f4b2 2507 telepathy-gabble_0.16.5-1+deb7u1.dsc fdadd2b61f2ed912af20df9766adb6ddafb156f174840c7a305e9f19efa16d33 2635272 telepathy-gabble_0.16.5.orig.tar.gz 330a95a295ee121c389c196f53cdf9e553818f2dc2382ca85fbc0a092840d9fc 13609 telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz 1f8afa98560dc52470e390e69d5192e58a22ae39cf269e333deec5e0e71f9f0a 814368 telepathy-gabble_0.16.5-1+deb7u1_amd64.deb 89a8eaffa1af48b5b7a7aba1c2054188efda5e40688e70bc354fef866748f4bf 2126128 telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb Files: 839173a6853756336173292c1e71eac8 2507 net optional telepathy-gabble_0.16.5-1+deb7u1.dsc 06eab928c1d147029ee33be53a03710c 2635272 net optional telepathy-gabble_0.16.5.orig.tar.gz e3f2b84a2f1101a9bc1d66ecbad31919 13609 net optional telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz 181cd490f188697c5b21889a9c339dd1 814368 net optional telepathy-gabble_0.16.5-1+deb7u1_amd64.deb adce98852e314d5f65763701635ab054 2126128 debug extra telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUaZPNk3o/ypjx8yQAQj7zxAAlQz5+Gjb34dJrveJuAtZgRfFOvwf8oT0 kGjnRFDAx2WpL4IEaSIJzVmZTZubAh7yK30q6iXczfHZI8izQ3nQyfrwiY7bUHeo vo+mQITat8hp57kdV+YdbP4moxEi02+1Ki4dIqawgAikgX10RvDBJzkPWHyJKNJI R4spfjSYotr7EUq1iFi2M/nzEFEDfCsclfE1GemFNydYLb9Eu/dmTbGO2gDR2TP1 1f8zHtJfCc8oYEGhDDd6fzyHprtclV0JlJozdYMCzW5q3oRaI79JDebvgGDuj+m/ WXIa1pK6CaAs7/Wk84SC9b++OETmibqTAJdw5eosrGSeIcj38E+w592HCelXEILg M59gD/KmlAYts1yOw3uqiQLgdZtNRAg1sIm4U/YtiFJwGNT7+zR5jb66EgWeuQGN b71SWKH++bdlQiUHoH6tzG5OXbfEQ7iVrsh5SWOGLXCzBq7DLxUs4NBL5N1Lvk8u jyrQQoQH1CNLKQfC5JgqUxub4BoH5d5ZkYx7tsEGvVjsuCcCjwnT35dcHiTYn271 dCmS8tji/lcxesJDLDGDy5Ub+TpFcuh/IueGhDuGTHy0uJYnxnYav8RemtWvTCfW lGdhRyv6rFbhYdvX5kS6EVMO9MIdUw729HCCiXDhwALuQHt/ss4G9QijkYvybbBu l5YT4ORhDLU= =/R59 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1ujd3p-0007ln...@franck.debian.org
Accepted empathy 3.4.2.3-2+deb7u1 (source all amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 13 May 2013 09:25:02 +0100 Source: empathy Binary: empathy empathy-dbg empathy-common nautilus-sendto-empathy Architecture: source all amd64 Version: 3.4.2.3-2+deb7u1 Distribution: stable Urgency: low Maintainer: Debian Telepathy maintainers Changed-By: Simon McVittie Description: empathy- GNOME multi-protocol chat and call client empathy-common - GNOME multi-protocol chat and call client (common files) empathy-dbg - GNOME multi-protocol chat and call client (debug symbols) nautilus-sendto-empathy - GNOME multi-protocol chat and call client (nautilus-sendto plugin Closes: 706900 Changes: empathy (3.4.2.3-2+deb7u1) stable; urgency=low . * gbp.conf: set branch to debian-wheezy * Backport patch from upstream 3.8 branch to avoid a crash now that Google Talk vCards can contain a (read-only) field, which is not flagged as supported in telepathy-gabble. (Closes: #706900) Checksums-Sha1: bb37f3070971a1a9d6ea478e8af9bc6e515ba075 3455 empathy_3.4.2.3-2+deb7u1.dsc 0366de22be3237017f13d0c7900a81754a11d1eb 22174 empathy_3.4.2.3-2+deb7u1.debian.tar.gz e876fac1e7a93cef2b2418ac6b4ba6a2818d0cc1 2451912 empathy-common_3.4.2.3-2+deb7u1_all.deb a1ab527ab1845be4167f4bf7295f2a4ba08222b0 1562996 empathy_3.4.2.3-2+deb7u1_amd64.deb b99a13ccd50ef11a9ce94fd84573c01aa9f51909 3622292 empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb 7cc3ecd9f18eb6743a055e3c7427f1e3f8e40a4d 1123404 nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb Checksums-Sha256: e6d294911019e93113f1e6c06898d49d307bc6de79e04579476e9d3c684afc0c 3455 empathy_3.4.2.3-2+deb7u1.dsc 2414df3d7cb0795131c3be0983d40d19ea58238d212cb551c2cc244f12542790 22174 empathy_3.4.2.3-2+deb7u1.debian.tar.gz 90dae84f38dd38545a90dbb115770d5fc9eeb2b6cb7c4b89f2b6e7c14c86fd46 2451912 empathy-common_3.4.2.3-2+deb7u1_all.deb 9f9df83e4edb8f23c068746afa45eec893f1abc14c537d48bcb900fc9d9a2e52 1562996 empathy_3.4.2.3-2+deb7u1_amd64.deb 35c496298f12aa1eeebb4a5f977f6343aea8b68d0cd42827f13e7ed3a8caa9ee 3622292 empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb cca6d37f09107b16fd17bf49b7ee0528edce484b7388ae036e6531ff76f96daf 1123404 nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb Files: aa3a595924eee13bff05894b35250606 3455 gnome optional empathy_3.4.2.3-2+deb7u1.dsc 0f29f8bea79816c2eecd3bdb6e075b5d 22174 gnome optional empathy_3.4.2.3-2+deb7u1.debian.tar.gz 09b9e188fc5168e596f6d9da70e10470 2451912 gnome optional empathy-common_3.4.2.3-2+deb7u1_all.deb 33ad1c1820699106ef1446c393f04773 1562996 gnome optional empathy_3.4.2.3-2+deb7u1_amd64.deb e8f7eb59fdd775347282bb01b0299c5f 3622292 debug extra empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb 9cb38b6e6dba5aac9fb9744ba8346493 1123404 gnome optional nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUZHrkk3o/ypjx8yQAQg/HA/+PFkDawVmoKYfF8yhBbgG3/DpMzZnqtOY MAw9rWv0ekIKPi8a0M5KIDMrRWoIjuinwALVPI8S8r+uNKvemtAavKNcSHusoZlA pDTxHxNIxtqms/rSL0KZMRczMMoeu3uOp2IFKig8Asf0XlUpYaL+OOe7m1QkIhVT 99SoH18GH4GOpoaqiXtOwlssSK+Bpbiqf5872/BBYb/jHdDKW2D011gTPtZurW22 0IOQZ6ef0acynxckGNtgEJi98n8G1PU8ca8MDahrbSivHEH8Xq+p45/vbd7wBoBv ovhpBY5h5Kx4Ie6/SRjOvAaDIo2di8ilcYYZWg8FGB/bXHukFEtVOIssxQl/CrmO GPOroHTk2r3Ld6uAj+S3HQzQ1WZ2/SuFQpz9Jfs8BbvcZc/8AIG9JRhViFRVkD8A olr0sLnPinIPUCRZzpsxhatAihnvPz+ZWJyX47gL9fLLbJZP33LG16EoaY1I3KEf NwH9oFghkn/291BLSU1Ce6+mM1iQHhZCWikR62HWOX1IA7qLFsiwix9SpBw/v8h3 y/sIah3ZxveTgIRuZb3z+b3HsJKT7SLvv1sZNqne0HEcAGShlBDt8EWQ+LqTdI+h 3jZVL0D7hGhUUfBbbBmtM4tHDISUMeZqrI1YU5qbX5dRQiR9YkNwAnDW1jeHrdqD 1fLe632zMMA= =DIiu -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1ucmao-0008nx...@franck.debian.org
Accepted dbus-glib 0.88-2.1+squeeze1 (source all amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 15 Feb 2013 17:58:34 + Source: dbus-glib Binary: libdbus-glib-1-dev libdbus-glib-1-2 libdbus-glib-1-doc libdbus-glib-1-2-dbg Architecture: source all amd64 Version: 0.88-2.1+squeeze1 Distribution: stable Urgency: low Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: libdbus-glib-1-2 - simple interprocess messaging system (GLib-based shared library) libdbus-glib-1-2-dbg - simple interprocess messaging system (GLib library debug symbols) libdbus-glib-1-dev - simple interprocess messaging system (GLib interface) libdbus-glib-1-doc - simple interprocess messaging system (GLib library documentation) Closes: 700638 Changes: dbus-glib (0.88-2.1+squeeze1) stable; urgency=low . * Apply patch from upstream 0.100.1 to fix insufficient checking leading to authentication bypass in pam_fprintd (CVE-2013-0292) (Closes: #700638) Checksums-Sha1: 4066be1400dc0d9eed0ca853206850fad495f3e1 2171 dbus-glib_0.88-2.1+squeeze1.dsc d13366afbdb130a8e515ed1af515d86a4be6dca2 19577 dbus-glib_0.88-2.1+squeeze1.diff.gz c3b9543727e6c278f134aae67890fe2051a4fa5f 149698 libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb 99d5c1b9f04b79e3561a8c5dac309f6415a9b7ab 225884 libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb b80b4e94d00a45c8eb6cf35b023ec4c5ca84f951 172742 libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb d3be6f5d48aec206db93cf7400191d2a61200424 277114 libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb Checksums-Sha256: 06b96c903563ad13183779a21d247939a1f2957c22d87f18c381ed9bfc18c84b 2171 dbus-glib_0.88-2.1+squeeze1.dsc 7a678a82c2021ecec5e5c6b336a369cff41484b49ef26b0bb8c5df3414345119 19577 dbus-glib_0.88-2.1+squeeze1.diff.gz e4ff3a05deead6bfd2045e4c60491208d635e268f8d4fde1d99faabd8a53353c 149698 libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb 548e8974126ed894cdc5ef1e7a4b719e7e45fda5511301f5b851e9359567c8ec 225884 libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb 07d7ab68a257b382b426b82f35da312de858f09154499eacc3f2a6022ebe850e 172742 libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb c40c9d3019b933160f9ac973b6467ed9635acf9f270b0de494567e3a83f1121c 277114 libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb Files: bd836fb9d50c92425cf201975c9a1f25 2171 devel optional dbus-glib_0.88-2.1+squeeze1.dsc 0df12e84015e72bbe74cbcf26b123bfe 19577 devel optional dbus-glib_0.88-2.1+squeeze1.diff.gz 441e1803e5a48b0ff833a9aee534c17a 149698 doc optional libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb f8c456b66ffc252af7f3b8534baa5911 225884 libdevel optional libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb ec810b7bcbcf7e9000b32aac87073c12 172742 libs optional libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb 42ed6b4f02e9581eda93b9459f061e59 277114 debug extra libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBUSJQZU3o/ypjx8yQAQh7KA/+LoSGXaqKPE/gFj/ipKb3Py6YgTCw5FWx C+jBiGrxdhbRAyO+34VNttbwTzYYlm59ldDDZt3DoXValKttXu6r8snEfodltLxw C22utI27ZvnHkEPfZ3BNTlHafiahmQif56mYBSVqThd8SzEHfiZQzDLh82Vzx+3i sGq9Y7t5I9xCQ1u6RsSHYatDCDLs86IKlDQj5rt8doGbdBo3qSNW7ZpIvNy6VJBX ZjyHyWZvYxwRIz5TItoPv+JIEmPY1e1BXI2LKoT42qJLqGWTl0QVovUwWuh3i0VK 9BT4DLwuaw9yoJRmvpd1yFJ14JhPDP/dLPfbUrQTX6p9p0LcY7w+QjMz0h9mjdAX 8QZ3tvY3mFe27v35fQKouiolZZvE2DN1bNu/0VRlwyywqCz0y092wNQjFUsfKEmq 7CJF9qA4zEKGJEqLg4UKH/GRCxmkZ6OOxw/QrVt8U+r7Zwd0gNYCcQwkTggXYdIz RNnTflnKEYPN4AjRyCLNgFpN+FYEX9ly6RT6Y/r2eMq9FOylhckzmHG/Lntgau7/ o1QeG+jraPNvH2Ne6TZumbGHyYkSZ5by8LVYH6/tXudWOIqN/H5o7khu2w8gqeRU 3frZpMDypbonl5Lg00sVkakHMJi4evXLUDVpTVCv4WnGxHiuNPE8mJe+0Ocl+LWR C20hKMAza58= =Wcu0 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1u7unx-0005vq...@franck.debian.org
Accepted dbus 1.2.24-4+squeeze2 (source all i386)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2012 08:47:10 +0100 Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source all i386 Version: 1.2.24-4+squeeze2 Distribution: squeeze Urgency: low Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system libdbus-1-dev - simple interprocess messaging system (development headers) Closes: 689070 Changes: dbus (1.2.24-4+squeeze2) stable; urgency=low . * CVE-2012-3524: apply patches from upstream 1.6.6 to avoid arbitrary code execution in setuid/setgid binaries that incorrectly use libdbus without first sanitizing the environment variables inherited from their less-privileged caller (Closes: #689070). - As per upstream 1.6.8, do not check filesystem capabilities for now, only setuid/setgid, fixing regressions in certain configurations of gnome-keyring Checksums-Sha1: eac32b869c61bd5d847be756a340fe7cd5a7d23e 2186 dbus_1.2.24-4+squeeze2.dsc 94ee1a0ac39aeffd1e376ef7029d35afd7a60179 37961 dbus_1.2.24-4+squeeze2.debian.tar.gz b00fc229b77fd00cbc3fb825cc650431c69c2d73 1837900 dbus-1-doc_1.2.24-4+squeeze2_all.deb 6f4f5ea0851ace56f03acb222c19071f9599d239 213666 dbus_1.2.24-4+squeeze2_i386.deb 4e501b3ac3d77e35edbf4d6366ca6dbd05e9ae60 42564 dbus-x11_1.2.24-4+squeeze2_i386.deb ab10693f2ec6a50fd07dc9863b07fa78d9305cc8 130512 libdbus-1-3_1.2.24-4+squeeze2_i386.deb 99c8cdfd13bce8df56770c670230f7887820d7b0 221096 libdbus-1-dev_1.2.24-4+squeeze2_i386.deb e73b75d59d6eed63f7aa8616dd8cfdc9fca0001a 770860 dbus-1-dbg_1.2.24-4+squeeze2_i386.deb Checksums-Sha256: 6660bed259a4bbb5e15788bf305c8b2465acb2a33dbb1d01f23d6fca2ac5cfd0 2186 dbus_1.2.24-4+squeeze2.dsc a32dd583f3cc6a5aef6897e8b792510c21092d1b0d5655c2755b0af4be855964 37961 dbus_1.2.24-4+squeeze2.debian.tar.gz 87a4669d904f843c0037d23a9b68b0d1283aa93179b9ca06c384c3b7756bc743 1837900 dbus-1-doc_1.2.24-4+squeeze2_all.deb 2c4e9aa80db1d0eb95b55b7373975a5c4dacdccd6da056a700c14aef630aac25 213666 dbus_1.2.24-4+squeeze2_i386.deb 0563cf55a3a03904827db461f35269465ad0a8ab5c6d92889ead5cc5540e22e8 42564 dbus-x11_1.2.24-4+squeeze2_i386.deb bb9e6cca67fcc5b6c27c4674d89d862da0e5ea8eb66b4c8833b0daacdf3138fe 130512 libdbus-1-3_1.2.24-4+squeeze2_i386.deb 7457a9d32a5ae686841f3099b2813e965b8d09e32dc7c04b5efb171ce51349ad 221096 libdbus-1-dev_1.2.24-4+squeeze2_i386.deb 82f2ea80d494f73abaf9273c10bb1bcbe0fd77ceed7213bcf550f2e31ecc72fe 770860 dbus-1-dbg_1.2.24-4+squeeze2_i386.deb Files: d2bb0c9a9cbbef845d579c34291c50c2 2186 devel optional dbus_1.2.24-4+squeeze2.dsc 7bb2156d28f38454813c32bf48c98557 37961 devel optional dbus_1.2.24-4+squeeze2.debian.tar.gz 1754df1871da923df3f85ec308213901 1837900 doc optional dbus-1-doc_1.2.24-4+squeeze2_all.deb bfd457341ce560037613cfd493de300d 213666 devel optional dbus_1.2.24-4+squeeze2_i386.deb 8d287c2ff8e57960fb4f2af337616789 42564 x11 optional dbus-x11_1.2.24-4+squeeze2_i386.deb 762242a9e0f39aaf41e0b5bf66c0b99c 130512 libs optional libdbus-1-3_1.2.24-4+squeeze2_i386.deb 230538d9a0d7c304c6a7b62720790a9c 221096 libdevel optional libdbus-1-dev_1.2.24-4+squeeze2_i386.deb e6d06ad29e9d581c80b4b615595c4349 770860 debug extra dbus-1-dbg_1.2.24-4+squeeze2_i386.deb -BEGIN PGP SIGNATURE- iQIVAwUBUPHKrk3o/ypjx8yQAQj6hRAAlk+smNsRE6y6j9AynXNX3eyv8B0E7f+v Wpqyr2i2nRZ3aRpGRsJFva0zyW9yvATr10es9hNMdTCyE+k53el8KYVb4xlwF+KL o5SZgXPjUzfnjeSlD0LM+me5axp+2nVhUQweDSF2K9/3OMdbitTJAFb8POpd0hRL Wmm8TQUzBtfewyMS0YFHFouUcBSXO7T9tkefNEoMjmqePRNa79kkXYp8wgivdD7h eZ3XUI9VPi1o4t6759H8ddxYHMQ5VKskfrPSPaQr5jcfLQ1aBfLVYyy0pLW1rATB R3VZwAXQt6ohhHLHkLrRrlyK6jOSGTTPRm5vXEflsyVutM11w3TVUws8Tkyu2ajr /vOzm8l9BN6667exRYTxcV46aow5bA/+LoXz7gjbYUzZCqY+jd1gzM+BjRAo22dG VMUcL1jBz9sY5n0OhKeueJq3vfB7p5wmbBRutJsh9O5O2/H2XDY0I464yIwpaEdy eDVa+Xgysh8hHy5GBItwed7N6rK2FHNKaFMctAbpGxBOfd0xadu3xzNpvrBvaUPa 3A8b1/aFSQjkifW7zCRJwerES+9Z4rbzPKv1RZTdACqcGXQWAJIEn1WnsvvFS9tM egA/qhwvpZYkZYKPvO6nwpbXnLJv87xFmRhXzMaZyDP1uT8nTc8X+UltQYA2MHcc 9OQdGsqaoYg= =stEJ -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1tuan2-0006l7...@franck.debian.org
Accepted openarena 0.8.5-5+squeeze3 (source i386)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 29 Mar 2012 20:40:46 +0100 Source: openarena Binary: openarena openarena-server Architecture: source i386 Version: 0.8.5-5+squeeze3 Distribution: stable-security Urgency: low Maintainer: Debian Games Team Changed-By: Simon McVittie Description: openarena - fast-paced 3D first-person shooter openarena-server - server and game logic for the game OpenArena Closes: 665945 Changes: openarena (0.8.5-5+squeeze3) stable-security; urgency=low . * Add CVE reference to changelog and patch for previous version, now that one has been allocated * Incorporate ioquake3 r1763 into the patch for rate-limiting, to fix potential use of uninitialized variables if the network address family is unexpected * Apply ioquake3 r1898 to fix a regression caused by rate-limiting, in which the server would stop responding to getstatus after an uptime of 2**32 milliseconds (approximately 50 days) (Closes: #665945) Checksums-Sha1: 5c62c164675c8f57f68f72446b0c6442b782d410 2099 openarena_0.8.5-5+squeeze3.dsc 06ceb4e5e68a0ac1a2e89e7ff989275ec2c95296 248538 openarena_0.8.5-5+squeeze3.debian.tar.gz 4a34c56a841eb1d0b3cd0e985e121c2740bdad3a 76 openarena_0.8.5-5+squeeze3_i386.deb 771130d8a142f1a6592d052777946ff73f50fa47 2312550 openarena-server_0.8.5-5+squeeze3_i386.deb Checksums-Sha256: bd6b036cf9091a1040bac80f73755392fb6d1260302c5312d4cafc71da2b04fe 2099 openarena_0.8.5-5+squeeze3.dsc 9564f187fb73cc0245e094db89eb44b1bf39d7a5bcdbd9a931fff8fd7bb23f12 248538 openarena_0.8.5-5+squeeze3.debian.tar.gz 3cb96425fc96e27d2169d63f45af16b222b16ea32e7ef0a2468316090c1fa2aa 76 openarena_0.8.5-5+squeeze3_i386.deb e8cc3139509f11e0c803b77a710da0e32deedf631584b3ca164e70a31a8a9829 2312550 openarena-server_0.8.5-5+squeeze3_i386.deb Files: 49b44cf397e69a2a073a7f2171edd46a 2099 games optional openarena_0.8.5-5+squeeze3.dsc 7e8e56720f5e7e90530455b641343038 248538 games optional openarena_0.8.5-5+squeeze3.debian.tar.gz acf2896ff04eecd0ff6e378d75de711f 76 games optional openarena_0.8.5-5+squeeze3_i386.deb 3d9bbcc1b5f1acb67e424a3de46e1e6f 2312550 games optional openarena-server_0.8.5-5+squeeze3_i386.deb -BEGIN PGP SIGNATURE- iQIVAwUBT3TEJE3o/ypjx8yQAQjVAA//WEaSeG1aIUkF/Pcnyf7EwQZfeS+D1+cf gLBDPzNiuAGKjUSCXRZi+3daj4SggHIDfig6eACkR42nzbK7hBYZ1k+rHHQG5HOQ w32NWJdkdC26nvFkv4rphwgNFGuun8FhVl/Zsifzamkt4iYa8sE7mE0hbH9Z3iJx AJDxqDHwpC/R7K0QSbkDF3o+6DfLwrebva3upmBI6FSLrTEr4sx6nrNKQP3noaU2 TGj8O/8IBPEWO3hye8MgxJoeXGn9mO0Bx7TdPZFd0OWLpyYZy9uBllogYkNvUCN2 KHjmsp9eYhIH8kkQ4jG6OZ2XTJNz6m3Oodo/2RdxpRNO/fEEO+HfG6AmQEyHxIEH 4mBCsjyAB/vh/Wk96fqSoD6RfSMChHXb9eQzj8/vASSsqlZW0Cf45AII/2zBQLhx ZAPOigKpSd1n7zCC0toEN6fZ7hTaU+A/dETAISShFBqeyPegMAr3+v+uYtO2pP8W 2owsqHZ5lfUf+D76E4BXQpcttK9ITSWcT0EkB6JbcqOut+/J8GSDS8yiiyErwSN1 uEHCZuMdXG+HTRZErJ3EIsA2YpAuoeLbdVd2c1tuQb1kdgU4dRHP+rs0TiDJmMZH b+I08iBvMAUVX/swOoE/KaYGzTKcpFLEPsFZvin7qOLwPO0hxIOpbdnPeT06MPHl XBr2JxoJbbg= =K2vJ -END PGP SIGNATURE- Accepted: openarena-server_0.8.5-5+squeeze3_i386.deb to main/o/openarena/openarena-server_0.8.5-5+squeeze3_i386.deb openarena_0.8.5-5+squeeze3.debian.tar.gz to main/o/openarena/openarena_0.8.5-5+squeeze3.debian.tar.gz openarena_0.8.5-5+squeeze3.dsc to main/o/openarena/openarena_0.8.5-5+squeeze3.dsc openarena_0.8.5-5+squeeze3_i386.deb to main/o/openarena/openarena_0.8.5-5+squeeze3_i386.deb -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1silje-0003xh...@franck.debian.org
Accepted tremulous 1.1.0-8~squeeze1 (source i386 all)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 29 Mar 2012 20:40:49 +0100 Source: tremulous Binary: tremulous tremulous-server tremulous-doc Architecture: source i386 all Version: 1.1.0-8~squeeze1 Distribution: stable Urgency: low Maintainer: Debian Games Team Changed-By: Simon McVittie Description: tremulous - Aliens vs Humans, team based FPS game with elements of an RTS tremulous-doc - Tremulous documentation tremulous-server - Tremulous server Changes: tremulous (1.1.0-8~squeeze1) stable; urgency=low . * Stable update, incorporating a security fix from unstable Checksums-Sha1: 4913c6daef90f7708861115de1bc708d48a05892 1886 tremulous_1.1.0-8~squeeze1.dsc 3fae4813a75d09d7911ef5bcf25296f5c981f33d 42038 tremulous_1.1.0-8~squeeze1.debian.tar.gz 58247dd30b3d6d937681e5a6df7b47c280218939 675956 tremulous_1.1.0-8~squeeze1_i386.deb 955317ee70242b7fdb7f0d6fe70eeca46c8ed7a1 352734 tremulous-server_1.1.0-8~squeeze1_i386.deb 7d28983c61040478b7189f1bd54a6b149e30a46b 646134 tremulous-doc_1.1.0-8~squeeze1_all.deb Checksums-Sha256: fbff68320a3961fb19ad609d6dadce5416dbe949cdcadb76be0fec086c0ba50f 1886 tremulous_1.1.0-8~squeeze1.dsc e83e3dd3c66ec9dfe0f7c9d477fadbbffbdf2e27ff0cd3d2d7ede83709a55052 42038 tremulous_1.1.0-8~squeeze1.debian.tar.gz 78c46abd5d3e005889c27d609a0c7c9635c7953dd7ca27826d9fd3ed2f73288b 675956 tremulous_1.1.0-8~squeeze1_i386.deb 6ec111bdd287cfa7616aa31ba3dec404760eb6e32f79c451620c3f38b535b87f 352734 tremulous-server_1.1.0-8~squeeze1_i386.deb e149184dc6e56a0940153a651e07ae993b15e6de5ca186888a2e094f8d72adca 646134 tremulous-doc_1.1.0-8~squeeze1_all.deb Files: 90e78f7de3651f2729e274234162d63c 1886 contrib/games optional tremulous_1.1.0-8~squeeze1.dsc 349b1fa234d4987ee1d8ac0e650ac8ff 42038 contrib/games optional tremulous_1.1.0-8~squeeze1.debian.tar.gz 7e386cb1a6e0d3b0a6eb07d63f0aa615 675956 contrib/games optional tremulous_1.1.0-8~squeeze1_i386.deb 37868222be9a9026f2f2e7d07f53cd46 352734 contrib/games optional tremulous-server_1.1.0-8~squeeze1_i386.deb 9b7b9ea11df3ecc5ef907a3bea2d2075 646134 contrib/doc optional tremulous-doc_1.1.0-8~squeeze1_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBT3TEI03o/ypjx8yQAQi6jxAAmjWt6j2CeLQfbqrh1kBE4tZV2+wfbmG0 LxIxrzEp4oJq6tYbFg/Dj6MDUbPRBHN/4ryq2PIfl8F9aGW1/3FfAfYc40UaIea1 seCR9a3jbZkDg1e03xig3hahqktf9CqfhDmwKOjyHpw6WLIscYjfkmAoUJDCrBan 0Xp85xa7BNWHmjZW5MK+MP8VJM4RaeQxJdZhfXnt/ZtdNpab0WYD310gEhzqHxqi auhKKVdRoIf3CkRwXUppdD5467zOxN6upO1Q58sto3DQnHL7NWKNt3PQ3eiixmQr 2OjK3NSbxtRMQCiHaCCRRKushU1nzMv0uCN8KJbCMxmqyEv5ERMffeO1bYBxt8SM 6ACrM3ynPdZnoQXv+jrg+OI82mNuzoejzlMyf6v9i+u+/qKsBDIyD/vkdecbixtb STQPzNXzLc5m8dJQK33xOnUDrTpVISLEJxVw+71UOHHdBSolv+qEax5awowd6qW9 j0v/SoyfyfXXqpbcstHLihePnq7B3vOS8p+pAm2SBqMoALq1Nzr4ejCWGCSk5oax vAwkkhhYY8Oq0DaWBisqxJc1CVSs0QIrBkFhiJ1KHstKDTTTB5/moa0Q1zdFRRa7 HWwUM1aXVzBVx+Mytzkrlm1L5RkIUcHyKpTA6LvWUMRdzWSbk8uctOVyLYauwyYj 1EeYWg3iVy0= =pHdN -END PGP SIGNATURE- Accepted: tremulous-doc_1.1.0-8~squeeze1_all.deb to contrib/t/tremulous/tremulous-doc_1.1.0-8~squeeze1_all.deb tremulous-server_1.1.0-8~squeeze1_i386.deb to contrib/t/tremulous/tremulous-server_1.1.0-8~squeeze1_i386.deb tremulous_1.1.0-8~squeeze1.debian.tar.gz to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1.debian.tar.gz tremulous_1.1.0-8~squeeze1.dsc to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1.dsc tremulous_1.1.0-8~squeeze1_i386.deb to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1_i386.deb -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1ses9n-0006vj...@franck.debian.org
Accepted openarena 0.8.5-5+squeeze2 (source i386)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 25 Mar 2012 19:34:53 +0100 Source: openarena Binary: openarena openarena-server Architecture: source i386 Version: 0.8.5-5+squeeze2 Distribution: stable-security Urgency: low Maintainer: Debian Games Team Changed-By: Simon McVittie Description: openarena - fast-paced 3D first-person shooter openarena-server - server and game logic for the game OpenArena Closes: 665656 Changes: openarena (0.8.5-5+squeeze2) stable-security; urgency=low . * Apply ioquake3 r1762 to rate-limit getstatus and rcon connectionless packets, to avoid their use for traffic amplification. (Closes: #665656) Checksums-Sha1: 7046d95c04526b472ff0608dc3293110d4167664 2099 openarena_0.8.5-5+squeeze2.dsc 00f4cb42f3548d3a8af0e8fe5c69da5263fd4e88 2653889 openarena_0.8.5.orig.tar.bz2 ca15b82b2633c8ec5c9f096d8f871b5bea474d31 247425 openarena_0.8.5-5+squeeze2.debian.tar.gz 18415db20d382dc9b4d1ac538e96e124a2a4a366 744262 openarena_0.8.5-5+squeeze2_i386.deb b04914f7cc179f37f5bd851ebc70145e645b42c6 2312412 openarena-server_0.8.5-5+squeeze2_i386.deb Checksums-Sha256: eb80b2220f6318ce34e99ae4786e0ac3d190e22c97cc5113713714e2054f70d2 2099 openarena_0.8.5-5+squeeze2.dsc 3e9ccd58f1a95d4a103f4729ed6a6c88174503cfea1b4c13bf723ec8916a17e5 2653889 openarena_0.8.5.orig.tar.bz2 ef7fdfb30628b30588e4b14d0a868cfdd61a2422b2799c09756ceccfc8eb4d73 247425 openarena_0.8.5-5+squeeze2.debian.tar.gz 6b83ca2463f2976e7e0c6d44273507321c1af9e87cce519c83b9a6cd339ef7e1 744262 openarena_0.8.5-5+squeeze2_i386.deb f98591de8eed66352b45d92034c75500991294faabe4fa026c168993a205bda7 2312412 openarena-server_0.8.5-5+squeeze2_i386.deb Files: 689473cd2be80adcfbabcf1ec32d208d 2099 games optional openarena_0.8.5-5+squeeze2.dsc 04881c50a17e0ee3ffdbb9416e8f1259 2653889 games optional openarena_0.8.5.orig.tar.bz2 20529074fe6dd924a18eb82aafffaa53 247425 games optional openarena_0.8.5-5+squeeze2.debian.tar.gz e0a622957f15c98f5de65333505bb767 744262 games optional openarena_0.8.5-5+squeeze2_i386.deb 02885dc243f013fde743d1454bc00a00 2312412 games optional openarena-server_0.8.5-5+squeeze2_i386.deb -BEGIN PGP SIGNATURE- iQIVAwUBT3AxJ03o/ypjx8yQAQhqaxAAghqHg3dr9Q7VGxxXqta14Vcsq6jTs9W6 tijevfFJrK6k0SPwemb5yisscMxKf0WciiRt+YkNH7YuU5bT9BetH5DYgXnIssDl r5EChQPs2qB3a33/0KINmhRqGdQX867p+p60M2DtuYXs0QdSc/4GAMjztlYaz2s6 yXEknwrmms+4z3sVhE+mdAkYeE9xTRVyRoCMTcKEcd8naooHYhD9ejJsGXKG2q97 gOkDZambC3XnTD4fWb01ii+C9HDG+t18x9zvlp/kWDdCvjG/xIZLBFgyUJ5fwALT Nu8u6XyE8QZjEIXqt61Naye6keqRfWsKnLd2tI+mnirG387+k9Ou9o1JmhYmuLv8 aim8R7R/szmGXvdcIZxSGT9gIu4Inz6qXxoBqrYnzSWlydCAI2utNzSxcu+1wKch iWNr3tjvzrNUhcIhS4EThWSD4rX+oyKRzmXXuIS45MRuRRHZ+Ep2/OtkA9tv36Qe Fohrjwqinq/mrp3FVmeVKAY52rP06GYulKT0JuKAiPfG/w4AHl5JafJT74yQMSlx MeTwxkuSfL1ueQ3SL0vto5uOQ/R8WaTYbceE7IlFx3g5TvxlQ0uh/hRxUrUNfaBP TM5P0heCahxr7fhZZTTtTwwaxPHFNNpMSTR4KstWKMThcbkXXPevfQc1A3tVbTpy mA2g9JI+ExA= =25RM -END PGP SIGNATURE- Accepted: openarena-server_0.8.5-5+squeeze2_i386.deb to main/o/openarena/openarena-server_0.8.5-5+squeeze2_i386.deb openarena_0.8.5-5+squeeze2.debian.tar.gz to main/o/openarena/openarena_0.8.5-5+squeeze2.debian.tar.gz openarena_0.8.5-5+squeeze2.dsc to main/o/openarena/openarena_0.8.5-5+squeeze2.dsc openarena_0.8.5-5+squeeze2_i386.deb to main/o/openarena/openarena_0.8.5-5+squeeze2_i386.deb -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1scc7m-00055f...@franck.debian.org
Accepted tremulous 1.1.0-7~squeeze1 (source i386 all)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 25 Mar 2012 13:53:09 +0100 Source: tremulous Binary: tremulous tremulous-server tremulous-doc Architecture: source i386 all Version: 1.1.0-7~squeeze1 Distribution: stable Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: tremulous - Aliens vs Humans, team based FPS game with elements of an RTS tremulous-doc - Tremulous documentation tremulous-server - Tremulous server Closes: 660827 660830 660831 660832 660834 660836 Changes: tremulous (1.1.0-7~squeeze1) stable; urgency=low . * Stable update (#663104), incorporating security fixes from unstable * Fix an incorrect bug number in revision -6 . tremulous (1.1.0-7) unstable; urgency=medium . * Add a lintian override for embedded-library libjpeg (#589407) to avoid auto-rejection. It is a valid bug, but is not a regression, and fixing several long-standing security vulnerabilities seems more important than getting rid of an embedded library that is not known to be exploitable. . tremulous (1.1.0-6) unstable; urgency=medium . * Backport patches from ioquake3 to fix long-standing security bugs: - CVE-2006-2082: arbitrary file download from server by a malicious client (Closes: #660831) - CVE-2006-2236 ("the remapShader exploit"): missing bounds-checking on COM_StripExtension, exploitable in clients of a malicious server (Closes: #660827) - CVE-2006-2875 ("q3cbof"): buffer overflow in CL_ParseDownload by a malicious server (Closes: #660830) - CVE-2006-3324: arbitrary file overwriting in clients of a malicious server (Closes: #660832) - CVE-2006-3325: arbitrary cvar overwriting (could lead to arbitrary code execution) in clients of a malicious server (Closes: #660834) - CVE-2011-3012, CVE-2011-2764: DLL overwriting (leading to arbitrary code execution) in clients of a malicious server if auto-downloading is enabled (Closes: #660836) * As a precaution, disable auto-downloading * Backport ioquake3 r1141 to fix a potential buffer overflow in error handling (not known to be exploitable, but it can't hurt) * Add gcc attributes to all printf- and scanf-like functions, and fix non-literal format strings (again, none are known to be exploitable) Checksums-Sha1: 093c757c268baf294ca21bf5c3134f1b27c63ccd 1886 tremulous_1.1.0-7~squeeze1.dsc 824556728fc2c6d25e1236aa73cefd20cf798c80 39677 tremulous_1.1.0-7~squeeze1.debian.tar.gz b660cef21e1d446fa3319883c51d3d6b5ef51106 674826 tremulous_1.1.0-7~squeeze1_i386.deb 06a0f1fd077587c19793cb35fabf887376087e26 351748 tremulous-server_1.1.0-7~squeeze1_i386.deb b7e0b2fe05cb5c3cbd327d69e8f9397ba51440c4 645994 tremulous-doc_1.1.0-7~squeeze1_all.deb Checksums-Sha256: 1ee9da033efeb695a4466f6d21750176ac0114ef0f58731d93fe830104e477ed 1886 tremulous_1.1.0-7~squeeze1.dsc d6b0e3e4fe5362e82970d0bc7122485d9ceaf501eb1d842c212bc3811e61c61f 39677 tremulous_1.1.0-7~squeeze1.debian.tar.gz c44056831bce32a472cac71c256642e3b2ea6d98731ef0b374b7f3491e9b93fd 674826 tremulous_1.1.0-7~squeeze1_i386.deb 29b9b41418ea60ff11c99758e42a157c7776165f435eae36f9d0d2b240466d8f 351748 tremulous-server_1.1.0-7~squeeze1_i386.deb acb7a04f9648594d97c3a05eb0d71d847425d13b5b9e239e41977fa62313b419 645994 tremulous-doc_1.1.0-7~squeeze1_all.deb Files: 1aa63c3fa97393579591711e3c9768c9 1886 contrib/games optional tremulous_1.1.0-7~squeeze1.dsc 119bddb6b3b70513798a8c991d22668e 39677 contrib/games optional tremulous_1.1.0-7~squeeze1.debian.tar.gz b6fa83d46a72a0375642ef689f24239b 674826 contrib/games optional tremulous_1.1.0-7~squeeze1_i386.deb 6909f73b47b0336243e22b5767e95a48 351748 contrib/games optional tremulous-server_1.1.0-7~squeeze1_i386.deb 112bab3c2a43ee9218e1a66d65539b12 645994 contrib/doc optional tremulous-doc_1.1.0-7~squeeze1_all.deb -BEGIN PGP SIGNATURE- iQIVAwUBT29a8k3o/ypjx8yQAQj2ZA/+Mxdi5FUwSyH3uZZM8pwpk2rZdNjmb2tg ZNhCjH35iscLxb5vWmBXiO/GXI1THcQQCfbh7Ciwznf7azD+vItwxMgz8X8GAcco M39v4H+uewFkNs+yFFqBJgVGZ5F85ZyNSiCXyZa0kvA9tvXt8Mmte/D39MEiG+JD JyyDJ6zFcfNNIc9x48pR0Mp/GWt70dxFzv5v4fwRebYcIjczGsUMIk74O+spEx0v fAcboohekqgJuNToKYjiReFbSKbhzNi1oEC6cXRlxybZLSqdGKUzluttyRsosYqM KgkbdiWGYMkbd7NObjGuD7HnYA1e8APTAT3lMO4FO1ETjtm3AFbkq7KEkx73cSUs xCzon+nNy1+M2SM0di59ACTkV/Y9vWD7KJc1kv94Nj9MBzpAS4qwBaK/qGb+vhNw sXoDO/XEz80Z9T3KyX9r0bineg0LdoW0+JFSqmy+tWD03lybcrNusgJrC5yrQ1S+ GX/27mOUMbWluN/qU0Xk21wgGTKTjC4L9dB91rd5egAtiAlJ0NECWxXkQ5b5bgM2 rgvWD4GXZ0QXCyOWMmJF4vSNvOu691CLDBw9NJWQesqRQuZ8FsbtCBxuDzJHzAe5 kEGGmeIHg/gHJETpO2UyMrQZE9qXWwAwePRl7aKVskETddJT6naPqWj3DhsTAtRS MUbCK2CKgVE= =9D44 -END PGP SIGNATURE- Accepted: tremulous-doc_1.1.0-7~squeeze1_all.deb to contrib/t/tremulous/tremulous-doc_1.1.0-7~squeeze1_all.deb tremulous-server_1.1.0-7~squeeze1_i386.deb to contrib/t/tremulous/tremulous-server_1.1.0-7~squeeze1_i386.deb tremulous_1.1.0-7~squeeze1.deb
Accepted openarena 0.8.5-5+squeeze1 (source amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 28 Jul 2011 14:22:31 +0100 Source: openarena Binary: openarena openarena-server Architecture: source amd64 Version: 0.8.5-5+squeeze1 Distribution: stable Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: openarena - fast-paced 3D first-person shooter openarena-server - server and game logic for the game OpenArena Closes: 635733 Changes: openarena (0.8.5-5+squeeze1) stable; urgency=medium . * Apply upstream r2098 to fix arbitrary code execution by malicious QVM bytecode, which could be auto-downloaded from a malicious server if enabled. CVE-2011-2764 (Closes: #635733) Checksums-Sha1: 6324e0908b10ca4cadd0180c046e6ddd97c2881f 2099 openarena_0.8.5-5+squeeze1.dsc 79bb24858637b5edbe8c7f51d2c19721be191c0f 244882 openarena_0.8.5-5+squeeze1.debian.tar.gz cc33baf2ffe0638aaf92605b1ea7a824fe8ff5b0 928160 openarena_0.8.5-5+squeeze1_amd64.deb a89c63ebb580b4bf60559b0593ddd36ebd59a0c0 2764960 openarena-server_0.8.5-5+squeeze1_amd64.deb Checksums-Sha256: 65e774d64f6a4d35f1f39aed5f617eb95161dbb0991770c94b8681cd14db50b1 2099 openarena_0.8.5-5+squeeze1.dsc 90042a56561abe1b848ce35f1d72416c4efe05e421490f5e321ec4fbc919a66b 244882 openarena_0.8.5-5+squeeze1.debian.tar.gz e0b482b8d175a72affd0ad9e446fcc761c3ed2c8b538a8507fc6d68a1c6daf18 928160 openarena_0.8.5-5+squeeze1_amd64.deb 2b2f509cdd6087c8dd08711878c38d16e00f8088852e8583d389f6be58dc1273 2764960 openarena-server_0.8.5-5+squeeze1_amd64.deb Files: e994b70ef9fcfb312699d8d5207e045b 2099 games optional openarena_0.8.5-5+squeeze1.dsc 2ba30d14332f2b1c8a8b52ded26be2dc 244882 games optional openarena_0.8.5-5+squeeze1.debian.tar.gz a44dce91fea8d3966b65059ae6421c93 928160 games optional openarena_0.8.5-5+squeeze1_amd64.deb 767bd70893e485708f538cd1a6b2405e 2764960 games optional openarena-server_0.8.5-5+squeeze1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBTjQT4k3o/ypjx8yQAQg5Xw//b0XH5Zlg20dMzZ6HvbJAPQcan7synixA LjtUqL4eVujVxx40ru8hSOU3ZdvKAznN7UkAmgXTLuqSWwpTmtdo2QxRlbHo6pTf LKr2re3kFOi+oFC62mjHLwjzd3STLNMcJtz6IkHo7Y/fHae94Lb/cJrTp2ajiQP4 bEGzzQyJzbyO5RLNtlgVQoFa9L5aNlntDO66kL+t6RE+xCKeZtCdfQjlct71clbt lxCXzRMzParAYFD7CzrxAlLZ9NVWIIzBjtnkS2SnRZWjvkoLi3j+Unfcugk5EfgX o4MBB1TK/rl/XQyWyxeKsqsJJgP6E1xjrstOpNaxVgGPwcDPWlLVzCN2ZrHeakf9 LjBf8/adOglTHJZBXBDFGXwdQQy6cXkcljxuIbUME88s0bVu8SoWlx8LUPj1/Gtb S48XPHm27JCYIXRYumRF0wuskybWTu5cDsaIvEU/QEjldSdg54ED3MS8qFJNcIGB y/Lf7Xtlzu0DcleoEWxYz95tl3J27tsAfVzs5SMnPqvsZk1xUD16lD+3Zntx4l1K YVR/JVShznnq2zyWAxF3SFXOHh6uSKVGXuihfxMkbG7G4GQDQ5YjNuiB7oqQA638 DPH7dt20Yj0iH52Qf2fnQZ6XIASomn4yCRKw46ytqoJQAx/tos7rGuxZ6xa6CpaK 1fBaI9i84g0= =NlUA -END PGP SIGNATURE- Accepted: openarena-server_0.8.5-5+squeeze1_amd64.deb to main/o/openarena/openarena-server_0.8.5-5+squeeze1_amd64.deb openarena_0.8.5-5+squeeze1.debian.tar.gz to main/o/openarena/openarena_0.8.5-5+squeeze1.debian.tar.gz openarena_0.8.5-5+squeeze1.dsc to main/o/openarena/openarena_0.8.5-5+squeeze1.dsc openarena_0.8.5-5+squeeze1_amd64.deb to main/o/openarena/openarena_0.8.5-5+squeeze1_amd64.deb -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1qohxh-0003ps...@franck.debian.org
Accepted dbus 1.2.24-4+squeeze1 (source all amd64)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 14 Jun 2011 19:45:00 +0100 Source: dbus Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg Architecture: source all amd64 Version: 1.2.24-4+squeeze1 Distribution: stable Urgency: low Maintainer: Utopia Maintenance Team Changed-By: Simon McVittie Description: dbus - simple interprocess messaging system dbus-1-dbg - simple interprocess messaging system (debug symbols) dbus-1-doc - simple interprocess messaging system (documentation) dbus-x11 - simple interprocess messaging system (X11 deps) libdbus-1-3 - simple interprocess messaging system libdbus-1-dev - simple interprocess messaging system (development headers) Closes: 629938 Changes: dbus (1.2.24-4+squeeze1) stable; urgency=low . * Update Vcs-* control fields to reflect the move to git * Apply patch to fix CVE-2011-2200 (fd.o #38120), which is a local DoS for system services (Closes: #629938) Checksums-Sha1: 1f131b71c842fc8442611d1de55cbe99514e9c7f 2186 dbus_1.2.24-4+squeeze1.dsc a9c086190a93f50e02b3d3e65145db3c66ea3795 33628 dbus_1.2.24-4+squeeze1.debian.tar.gz b163eb8a3167d3581e24e8fbb6834f914e88d920 1831250 dbus-1-doc_1.2.24-4+squeeze1_all.deb 0c496269a673c0181cbf3b065d8fe579f3eee006 233202 dbus_1.2.24-4+squeeze1_amd64.deb 3b2c4c73c0e2fa0528ca3c0a5c7c153f6227bb9c 42870 dbus-x11_1.2.24-4+squeeze1_amd64.deb 297210703f7c762b82171b5d8ddb1164616c7bfe 145398 libdbus-1-3_1.2.24-4+squeeze1_amd64.deb 0d125034ed689436814d19850105a9341f320362 244978 libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb f8fc73f345fba810751c80a6cb5588ed8581d052 761536 dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb Checksums-Sha256: 96ab49cbf8c7deddb93de7d06122ab9c52e20087af3f5d21a762fb10ebe16651 2186 dbus_1.2.24-4+squeeze1.dsc 4115e3e31f8fc3f3267fdd5717a45310ec1fe5fa50f97a3d6b0d9b8bc55f 33628 dbus_1.2.24-4+squeeze1.debian.tar.gz 5a832cbeea34d22a0ab7a2eac4b619488ee299f960ced62ed677132d60d38b41 1831250 dbus-1-doc_1.2.24-4+squeeze1_all.deb e6caba3a5394b13b38bdb56bdf7e1b949c025a8fadbb53c208dd3545a8e1002a 233202 dbus_1.2.24-4+squeeze1_amd64.deb 7503cf484bfcb194ddedc98801ee5389c1c1cebee20f25d0fe675ecd6edcd6b3 42870 dbus-x11_1.2.24-4+squeeze1_amd64.deb b1629995788dc907ce50ed3bdca4b57cf1ba34aae646c2aaf4ef462d02a4739f 145398 libdbus-1-3_1.2.24-4+squeeze1_amd64.deb f969a1075441b80503c019879851ec788b7e1c78e653fdfeb81705e84f6abffa 244978 libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb 6e54b44ec79f72c14e0a689add740abbcbad08b15d609383448de8692714fc0f 761536 dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb Files: 7ddda7dc53301c23197f42ca1bb1fc00 2186 devel optional dbus_1.2.24-4+squeeze1.dsc 8e6be8290cad77c3212616768eba1ce7 33628 devel optional dbus_1.2.24-4+squeeze1.debian.tar.gz cc7114ff5f22691a23c4c6c13bef7755 1831250 doc optional dbus-1-doc_1.2.24-4+squeeze1_all.deb 98df5f2a39fb990b8a385890bb0b95fb 233202 devel optional dbus_1.2.24-4+squeeze1_amd64.deb 8b0ed0397524dbf5b5dfe0fa3e99b63a 42870 x11 optional dbus-x11_1.2.24-4+squeeze1_amd64.deb aec544f0daf37cbbecee20cfa127c4d6 145398 libs optional libdbus-1-3_1.2.24-4+squeeze1_amd64.deb 4262818ce80e3b5d3db4b1df755fab30 244978 libdevel optional libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb 7095a7ff67f5922245675f4276c1b84b 761536 debug extra dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb -BEGIN PGP SIGNATURE- iQIVAwUBTffJJk3o/ypjx8yQAQjpcxAAh0Ugc3QIYVzknIh0m5zXqBUPTsmNECb7 KOQv8ZcponAcz8F8WehCHNo4bYOurjWmq9GA048PQHU57w/6e85VUV3v/F7LzLKS szupuECn+MF97wVs40/LJysE/6gmkNnfYvtmDzKacroXQ6RvIJa7x02f7huZ1Wky Wmq8oGXWdSVM/myPIjrtjQBl1xiUFd/PhBcAa9YxfXlDj6oHxzQc33uHvnJiS0wQ PJwRSYHkbvQfIAoEs/L6TxrpNH0p1Xy3AvIMOV3QhZa6DbQnf+1v0IxKdhLDy+v5 9ld7sjMCWk+chQ3hoMfnUR22mN/jY9v0rKOZZNOBQytqtqUgynEnOUNk3JADW+yh 7IMxRLTRVpHzz3X2T+1kasuQrxi45P5NSNylStMtgc8y+2N4i7+juUkFMp95bcC2 HEnlr1dw504S1yLhMh2QosN3PHlEqXBGONYgvXmDy+E89iPqLaXVFAwQ3J7nttlE +pyznxF3e4mL38zX6r3gH5UTywKqUeDwtC5/OoiPBzuWMiLDP/vjcxaHNFlM14KY dNJNHMEZbQFEdLjevMRJ/BoCTr75mqPs3s27TqYsHPYyQGR3KNfbS0Jn5tQZb+Ta 2Dr18OkavyAut8cpMWqogAcJGA8leJiDclK5id8CwREfXmVCC5uflm8oQ/xIJny2 +GHthnyIEsg= =GiL2 -END PGP SIGNATURE- Accepted: dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb to main/d/dbus/dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb dbus-1-doc_1.2.24-4+squeeze1_all.deb to main/d/dbus/dbus-1-doc_1.2.24-4+squeeze1_all.deb dbus-x11_1.2.24-4+squeeze1_amd64.deb to main/d/dbus/dbus-x11_1.2.24-4+squeeze1_amd64.deb dbus_1.2.24-4+squeeze1.debian.tar.gz to main/d/dbus/dbus_1.2.24-4+squeeze1.debian.tar.gz dbus_1.2.24-4+squeeze1.dsc to main/d/dbus/dbus_1.2.24-4+squeeze1.dsc dbus_1.2.24-4+squeeze1_amd64.deb to main/d/dbus/dbus_1.2.24-4+squeeze1_amd64.deb libdbus-1-3_1.2.24-4+squeeze1_amd64.deb to main/d/dbus/libdbus-1-3_1.2.24-4+squeeze1_amd64.deb libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb to main/d/dbus/libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb -- To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Conta