Accepted glib2.0 2.58.3-2+deb10u2 (source) into proposed-updates->stable-new, proposed-updates

2019-11-09 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 06 Nov 2019 08:29:15 +
Source: glib2.0
Architecture: source
Version: 2.58.3-2+deb10u2
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 941018
Changes:
 glib2.0 (2.58.3-2+deb10u2) buster; urgency=medium
 .
   * Team upload
   * d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch,
 d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch:
 Ensure libdbus clients can authenticate with a GDBusServer like the
 one in ibus, backported from upstream 2.62.x branch (Closes: #941018)
   * d/p/Add-a-test-for-GDBusServer-authentication.patch,
 d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch,
 d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch:
 Backport regression test for #941018
   * Build-depend on libdbus-1-dev for better test coverage
   * d/control.in: Set branch to debian/buster in Vcs-Git
Checksums-Sha1:
 67223876134dfff9c56a1cb899472f348d57fb26 3466 glib2.0_2.58.3-2+deb10u2.dsc
 227a1925e7e4ccbc59a1651d522f32edffa0f688 93604 
glib2.0_2.58.3-2+deb10u2.debian.tar.xz
 386dbde513fc1bbd69d7453e56d7d6f72f039348 8280 
glib2.0_2.58.3-2+deb10u2_source.buildinfo
Checksums-Sha256:
 585667486fca2f2a32c04670e1008c5e0ff0cd96024c8618a3e78ee546d85a12 3466 
glib2.0_2.58.3-2+deb10u2.dsc
 c4c01644ec784f6b138441d2f8efbfe606d3a3154109d517bf6d8e89e150c57f 93604 
glib2.0_2.58.3-2+deb10u2.debian.tar.xz
 4ad27e8c435a4b7b7ec01be16c49ec277d9011b9060eea6a1f3f3c3fec851a64 8280 
glib2.0_2.58.3-2+deb10u2_source.buildinfo
Files:
 a660838c985e2eb23c2d26edff709b15 3466 libs optional 
glib2.0_2.58.3-2+deb10u2.dsc
 cdc77b1b87bf26a9113eccd5197c76a3 93604 libs optional 
glib2.0_2.58.3-2+deb10u2.debian.tar.xz
 678c1a794258634d95c8e4c824af6522 8280 libs optional 
glib2.0_2.58.3-2+deb10u2_source.buildinfo

-BEGIN PGP SIGNATURE-
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=7gUf
-END PGP SIGNATURE-



Accepted mutter 3.30.2-9~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-09-30 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 18 Aug 2019 19:51:33 +0100
Source: mutter
Architecture: source
Version: 3.30.2-9~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 932428 932767 932781
Changes:
 mutter (3.30.2-9~deb10u1) buster; urgency=medium
 .
   * Team upload
   * Rebuild for Debian 10
   * d/gbp.conf: Set packaging branch to debian/buster
 .
 mutter (3.30.2-9) unstable; urgency=medium
 .
   * Team upload
   * d/libmutter-3-0.bug-control: Include GL drivers in bug reports
   * d/p/renderer-native-Fix-EGLSurface-destruction-order.patch:
 Fix attribution
   * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch:
 Add bug references for #932428, #932767 and #932781, and retroactively
 mark them as closed by this patch in the previous changelog entry,
 based on feedback from bug reporters
 .
 mutter (3.30.2-8) unstable; urgency=medium
 .
   * Team upload
   * Update to upstream gnome-3-30 branch at 3.30.2-42-g2a81dc45e
 - d/p/clutter-x11-Consider-remapped-keys-when-guessing-the-keyc.patch:
   Fix repeated inputs from extended characters (long-press) in
   on-screen keyboard
 - d/p/compositor-Destroy-window-actors-list-on-destruction.patch,
   d/p/window-actor-Set-actor-as-compositor-private-in-window-be.patch,
   d/p/surface-actor-x11-Assign-X11-Display-only-if-we-have-reso.patch,
   d/p/surface-actor-x11-Bind-the-surface-actor-resources-to-win.patch,
   Fix intermittent crashes on exit/reload
 - d/p/compositor-Disconnect-from-stage-signals-on-destruction.patch:
   Fix stuck windows if an application stops responding and one of its
   windows gets unmanaged
 - d/p/clutter-x11-Implement-keycode-remap-to-keysyms-on-virtual.patch:
   Fix missing inputs from extended characters (long-press) in
   on-screen keyboard
 - d/p/cursor-renderer-native-Free-MetaCursorNativePrivate-struc.patch:
   Fix a small memory leak
 - d/p/wayland-seat-Use-g_free-to-cleanup-MetaWaylandSeat.patch:
   Fix an incorrect free-function that could lead to memory corruption
 - d/p/cogl-pipeline-Don-t-try-to-access-to-free-d-pointer-data.patch:
   Fix use-after-free
 - d/p/renderer-native-add-missing-eglTerminate-in-EGLDevice-err.patch:
   Avoid reusing an amdgpu display connection if EGL is missing the
   desired extensions
 - d/p/workspace-Focus-only-ancestors-that-are-focusable.patch,
   d/p/window-x11-Focus-the-default-window-with-delay-while-wait.patch,
   d/p/window-x11-Add-lost-definition-for-TAKE_FOCUS_FALLBACK_DE.patch,
   d/p/window-x11-Focus-a-window-in-the-active-workspace-as-take.patch,
   d/p/window-x11-Remove-double-definition-of-MetaStack.patch:
   Fix crashes involving window focus with some applications, notably
   JetBrains IDE
 - d/p/window-Emit-an-error-and-return-when-trying-to-activate-a.patch:
   Fix crashes when an unmanaged window is activated
 - d/p/window-x11-Don-t-double-check-for-unmanaging-windows.patch,
   d/p/window-x11-Accept-any-focusable-window-as-fallback-focus.patch,
   d/p/stack-Add-a-function-to-get-a-sorted-list-of-focus-candid.patch,
   d/p/window-x11-Use-any-focusable-window-as-fallback-delayed-f.patch:
   Fix hang when windows take focus but do not accept input
 - d/p/Updated-Spanish-translation.patch:
   Update translations
 - d/p/tests-Add-accept_focus-command-to-runner-and-client.patch,
   d/p/tests-Add-can_take_focus-command-to-runner-and-client.patch,
   d/p/tests-stacking-Add-tests-with-no-input-and-no-take-focus-.patch,
   d/p/test-runner-Add-assert_focused-command.patch,
   d/p/tests-Verify-focused-window-in-closed-transient-tests.patch,
   d/p/test-runner-Add-sleep-command.patch,
   d/p/test-runner-Add-dispatch-command.patch,
   d/p/Makefile-tests-Fix-paths-for-stacking-metatests.patch,
   d/p/test-client-Add-x11-events-GSource-handler.patch,
   d/p/tests-Add-accept_take_focus-command.patch:
   Improve test coverage related to the above bug fixes
   * d/p/wayland-output-Set-user-data-of-xdg_output-resource.patch:
 Backport patch from 3.32.1 to fix use-after-free in Wayland monitor
 management (Closes: #932428, #932767, #932781)
   * d/libmutter-3-0.symbols:
 Add meta_stack_get_default_focus_candidates(), which is added by a
 patch
   * d/gbp.conf: Set branch to debian/unstable
   * d/p/renderer-native-Use-g_set_error-instead-of-_cogl_set_erro.patch,
 d/p/renderer-native-Make-sure-we-re-not-destroying-an-active-.patch,
 d/p/renderer-native-Fix-EGLSurface-destruction-order.patch:
 Backport patches from upstream gnome-3-32 branch to fix another
 use-after-free crash that can be triggered by suspend/resume
Checksums-Sha1:
 0b89b443e1b96fbc49e541d520fa2a1252aeac81 3479 mutter_3.30.2-9~deb10u1.dsc

Accepted flatpak 1.2.5-0+deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-09-30 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 23 Sep 2019 08:44:18 +0100
Source: flatpak
Architecture: source
Version: 1.2.5-0+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Changes:
 flatpak (1.2.5-0+deb10u1) buster; urgency=medium
 .
   * New upstream stable release
 - Allow runtimes (not just apps) to use extra_data, which is required
   by the new org.freedesktop.Platform.openh264 extension
 - Support apps that specify several required Flatpak versions,
   such as 1.4.2;1.2.5; for runtimes that require the above feature
 - Backport some crash bug fixes from 1.4.x
 - Fix installation of bundles
 - Set looser permissions on the /run/host/monitor directory, to
   work better with tools like Fedora Toolbox on the host system
 - Do not wrongly remove extensions as "unused" if they are referenced
   by the 'versions' extension key rather than by 'version'
   * d/gbp.conf: Use debian/buster packaging branch
   * d/watch: Only look for 1.2.x releases
Checksums-Sha1:
 29473142b2c715dd618f595f856a80a3241b56e9 3507 flatpak_1.2.5-0+deb10u1.dsc
 72191b50fb419c43c1d50991730cd8cdeebe1809 1169144 flatpak_1.2.5.orig.tar.xz
 233fec2644523cd4387285c71fa0b0f1c7861353 25288 
flatpak_1.2.5-0+deb10u1.debian.tar.xz
 7fd789202da2d0c93278fc7e5c7fd112304e92b1 12296 
flatpak_1.2.5-0+deb10u1_source.buildinfo
Checksums-Sha256:
 85d23beef455b3cb6d50b164186da2822ef9bb3f12ac63792d534a03a3b02a46 3507 
flatpak_1.2.5-0+deb10u1.dsc
 c71b36bf0141cb3e0b4c3e024c81b62a58a3d1e17e7a53a60171372b450e4290 1169144 
flatpak_1.2.5.orig.tar.xz
 7f33dfb92c4c3e3ea551d3d7213fd720b7e2da94d702ecf8ea36e27ee3d698f3 25288 
flatpak_1.2.5-0+deb10u1.debian.tar.xz
 d625df97678c2216b114ab91d83604d12cc7b0ee10d35f22da2b2274d5684fb9 12296 
flatpak_1.2.5-0+deb10u1_source.buildinfo
Files:
 c919beb29284280df352ea7ce7fc6e92 3507 admin optional 
flatpak_1.2.5-0+deb10u1.dsc
 b7e0b74155b9efdc20beee609470ebab 1169144 admin optional 
flatpak_1.2.5.orig.tar.xz
 04a594f0539ea2c31a893b366c0bc4cb 25288 admin optional 
flatpak_1.2.5-0+deb10u1.debian.tar.xz
 1e40f3bb65edcce87b0755f4b6125620 12296 admin optional 
flatpak_1.2.5-0+deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=0Hin
-END PGP SIGNATURE-



Accepted gnome-shell 3.30.2-11~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-09-30 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 18 Aug 2019 19:50:59 +0100
Source: gnome-shell
Architecture: source
Version: 3.30.2-11~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Changes:
 gnome-shell (3.30.2-11~deb10u1) buster; urgency=medium
 .
   * Team upload
   * Recompile for Debian 10
   * d/gbp.conf: Change packaging branch to debian/buster
 .
 gnome-shell (3.30.2-11) unstable; urgency=medium
 .
   * Team upload
   * d/gnome-shell.bug-control: Include related packages in bug reports
 .
 gnome-shell (3.30.2-10) unstable; urgency=medium
 .
   * Team upload
   * Update to upstream gnome-3-30 branch, commit 3.30.2-22-gd41669189
 - d/p/dialog-Really-set-ellipsize-mode-in-subtitle-and-body.patch:
   Fix truncation of long messages in Shell-modal dialogs
   (LP: #1809788)
 - d/p/osk-layouts-Fix-French-layout.patch:
   Update metadata to reflect upstream backport (no functional changes)
 - d/p/boxpointer-Unset-the-sourceActor-on-destruction.patch:
   Avoid crash on reallocation of dead actors (LP: #1831555)
Checksums-Sha1:
 34ad2361bb821c67be64644cecb14acb98b485c4 3536 gnome-shell_3.30.2-11~deb10u1.dsc
 7b85a565b069291615d12fbfb02c9177a9a06410 72952 
gnome-shell_3.30.2-11~deb10u1.debian.tar.xz
 3c635348f2a7721d44648c23fa89c114b5826d7b 19232 
gnome-shell_3.30.2-11~deb10u1_source.buildinfo
Checksums-Sha256:
 710b68419cfd0d5168de2d402a4ff11684678abdf4a00a627fc122107074c030 3536 
gnome-shell_3.30.2-11~deb10u1.dsc
 4ffb04a7af69b883a7e436f3ea067416b29d4af4b58971a2a303b84851f43a09 72952 
gnome-shell_3.30.2-11~deb10u1.debian.tar.xz
 033445d79ffaaff7d82d7d767f33ff098c8e34a94d6da68cbaa61a7038e658fe 19232 
gnome-shell_3.30.2-11~deb10u1_source.buildinfo
Files:
 8cdd0221a0d4bd649dffcd3ec1b84d6b 3536 gnome optional 
gnome-shell_3.30.2-11~deb10u1.dsc
 105f09f7bfe5723753b1c8d47bbc3967 72952 gnome optional 
gnome-shell_3.30.2-11~deb10u1.debian.tar.xz
 3f90798cc5d825752dba543d72ca66ba 19232 gnome optional 
gnome-shell_3.30.2-11~deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=DCxT
-END PGP SIGNATURE-



Accepted gnome-sound-recorder 3.28.2-2~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-09-17 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 08 Sep 2019 11:36:53 +0100
Source: gnome-sound-recorder
Architecture: source
Version: 3.28.2-2~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Changes:
 gnome-sound-recorder (3.28.2-2~deb10u1) buster; urgency=medium
 .
   * Team upload
   * Rebuild for Debian 10
 - d/gbp.conf: Set packaging branch to debian/buster
Checksums-Sha1:
 a0e586383c21da6c9f8a907ff660eff83411fe26 2624 
gnome-sound-recorder_3.28.2-2~deb10u1.dsc
 8f71ac4ab011350f38a6ed41d5e3d368b8709cb4 5088 
gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz
 8622bad0fd2178498cbf6b9583c72203de78dbf4 15786 
gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo
Checksums-Sha256:
 08dd59a02d22edb777566a9e1739d56ef5b0478055164589ee5601c592ed0c9f 2624 
gnome-sound-recorder_3.28.2-2~deb10u1.dsc
 622604dea00f2c5038e50198b3fa1c9e5c6944f550b56ccda228e537ee1d3521 5088 
gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz
 c048f30102b886600cdcfc90cd82e3706f13fe26196c00098334e14d0817e1fb 15786 
gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo
Files:
 09cd40f6e716f06af973ab1c69cc2ee3 2624 gnome optional 
gnome-sound-recorder_3.28.2-2~deb10u1.dsc
 919d2b4349f6c30a909a457ecce90cf5 5088 gnome optional 
gnome-sound-recorder_3.28.2-2~deb10u1.debian.tar.xz
 d66e764aae02c253b4457990eb7c0723 15786 gnome optional 
gnome-sound-recorder_3.28.2-2~deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=Hd3V
-END PGP SIGNATURE-



Accepted epiphany-browser 3.32.1.2-3~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-08-31 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 30 Aug 2019 22:39:13 +0100
Source: epiphany-browser
Architecture: source
Version: 3.32.1.2-3~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 927731
Changes:
 epiphany-browser (3.32.1.2-3~deb10u1) buster; urgency=medium
 .
   * Team upload
   * Rebuild for Debian 10
 - d/gbp.conf: Set packaging branch to debian/buster
 .
 epiphany-browser (3.32.1.2-3) unstable; urgency=medium
 .
   * Team upload
   * d/gbp.conf: Set packaging branch to debian/unstable and upstream
 branch to upstream/3.32.x
   * d/p/lib-Give-libephymisc-a-RUNPATH-pointing-for-our-private-l.patch:
 Ensure that the web extension loads our bundled copy of libdazzle,
 even though it only depends on libdazzle transitively via
 libephymisc. Thanks to Carlos Alberto Lopez Perez for clarifying
 precisely which component was failing to load. (Closes: #927731)
Checksums-Sha1:
 87a232b55516f5e183bf0cb3c76e451c3e462f6b 3006 
epiphany-browser_3.32.1.2-3~deb10u1.dsc
 fdabe6f7bda82a802b214120920fead7c9523834 78104 
epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz
 4e26015d6e1f449bf72a243f2ec29cd545ea5edd 17517 
epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo
Checksums-Sha256:
 d9bc3e803f180e1ba4a3277f5b36d85a303fcc0ca06d4517dd123581b8292c5e 3006 
epiphany-browser_3.32.1.2-3~deb10u1.dsc
 5966b1190bbb9a294ac73d95feee3522a70996b1dd71997bf9f58aba3d2c35ac 78104 
epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz
 8b303fc00c8d96388bf05371b55a99156f0cb572ea2ca41121b0058f6f2aad29 17517 
epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo
Files:
 3ce4a8f0312e5e3f4c8a1721fb38e961 3006 gnome optional 
epiphany-browser_3.32.1.2-3~deb10u1.dsc
 8908169ceeddeae6312a4644f4dabc06 78104 gnome optional 
epiphany-browser_3.32.1.2-3~deb10u1.debian.tar.xz
 705c4e5c0c292adf193452cfa6bd93cb 17517 gnome optional 
epiphany-browser_3.32.1.2-3~deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=P8Tm
-END PGP SIGNATURE-



Accepted gnome-bluetooth 3.28.2-4~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-08-31 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 26 Aug 2019 11:11:19 +0100
Source: gnome-bluetooth
Architecture: source
Version: 3.28.2-4~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 932405
Changes:
 gnome-bluetooth (3.28.2-4~deb10u1) buster; urgency=medium
 .
   * Team upload
   * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch:
 Mark as applied upstream for 3.33.91
   * d/gbp.conf: Set packaging branch to debian/buster
   * Rebuild for buster
 .
 gnome-bluetooth (3.28.2-4) unstable; urgency=medium
 .
   * Team upload
   * d/p/client-Disconnect-all-signal-handlers-when-client-is-disp.patch:
 Add proposed patch to avoid GNOME Shell crashes when
 gnome-shell-extension-bluetooth-quick-connect is used
 (Closes: #932405)
   * d/gbp.conf: Set Debian branch to debian/unstable
Checksums-Sha1:
 f4ffc842b11962f09fbd0e95f450797b02d51b50 2706 
gnome-bluetooth_3.28.2-4~deb10u1.dsc
 07f3297d58599a9aec83dfaf71b171c8d063987a 11524 
gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz
 afff3c473a82719c772e63b9291597cbd137969b 14952 
gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo
Checksums-Sha256:
 8590d321ca0bc6c9aa04868cc23d358a67224a36159d29aac5026caf0f409024 2706 
gnome-bluetooth_3.28.2-4~deb10u1.dsc
 7c24eaf4024eb4a26775fc85f01e991d1966654db1448df91a33da496c3e7124 11524 
gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz
 90b265d39d1b77d57117dca23fb6524433dbd99220883988b1adf2394c8ada4c 14952 
gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo
Files:
 bd242112aa97a3de2f46806029d7eaa1 2706 gnome optional 
gnome-bluetooth_3.28.2-4~deb10u1.dsc
 8e7714f3c670404340a3a7afaf5c3ff6 11524 gnome optional 
gnome-bluetooth_3.28.2-4~deb10u1.debian.tar.xz
 e91973f1eedf5d39e5bd75e810bb1de1 14952 gnome optional 
gnome-bluetooth_3.28.2-4~deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=q2qz
-END PGP SIGNATURE-



Accepted gnome-control-center 1:3.30.3-2~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-08-23 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 21 Aug 2019 08:56:24 +0100
Source: gnome-control-center
Architecture: source
Version: 1:3.30.3-2~deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 933529
Changes:
 gnome-control-center (1:3.30.3-2~deb10u1) buster; urgency=medium
 .
   * Team upload
   * Rebuild for Debian 10
   * d/gbp.conf: Set packaging branch to debian/buster
 .
 gnome-control-center (1:3.30.3-2) unstable; urgency=medium
 .
   * Team upload
   * d/patches: Mark more patches as forwarded upstream
   * d/patches: Sort non-upstreamable patches to end of patch series
   * d/patches: Update to upstream gnome-3-30 commit 3.30.3-7-gf41ae4269
 - d/p/info-Fix-crashes-when-retrieving-disk-size.patch:
   Fix crash when the Details -> Overview (info-overview) panel is
   selected (Closes: #933529)
 - d/p/universal-access-Fix-duplicate-settings-call.patch,
   d/p/universal-access-Fix-leaks-checking-settings.patch:
   Fix memory leaks in Universal Access panel
 - d/p/universal-access-Don-t-use-widget-names-for-GSettings-key.patch:
   Fix a regression that caused the Universal Access -> Zoom
   mouse tracking options to have no effect
 - Update translations: is, ja
   * d/gbp.conf: Set branch to debian/unstable
Checksums-Sha1:
 2dba65a0c6aacbbb66a34d0ad99a01395e339639 3520 
gnome-control-center_3.30.3-2~deb10u1.dsc
 49a77d950635386d7e5c74fd0cc0b6c17441a163 97808 
gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz
 4b6cd5e3a05f7853ca1a0b6391e070f63379b11e 24560 
gnome-control-center_3.30.3-2~deb10u1_source.buildinfo
Checksums-Sha256:
 637ef14a5c5a39bb0ca59966eaf9097e01c5ce00c9ab4893b865a4ea6f02b378 3520 
gnome-control-center_3.30.3-2~deb10u1.dsc
 9b3aacbf556ebcadaeb28df67d5d636d47baefd68237f2b2344c89e5ee57959b 97808 
gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz
 db0915de7719a09ac6f3a27d5932a2f67c475866c515265a6234181e16f67858 24560 
gnome-control-center_3.30.3-2~deb10u1_source.buildinfo
Files:
 edb43230bb90f034ead05fda0e3b08ae 3520 gnome optional 
gnome-control-center_3.30.3-2~deb10u1.dsc
 d8f943ffd218bf88911bf1075a1c0018 97808 gnome optional 
gnome-control-center_3.30.3-2~deb10u1.debian.tar.xz
 031a8bc89810b29f597f515fd3681bf0 24560 gnome optional 
gnome-control-center_3.30.3-2~deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=YKjV
-END PGP SIGNATURE-



Accepted glib2.0 2.50.3-2+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

2019-08-21 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 13 Aug 2019 10:46:20 +0100
Source: glib2.0
Binary: libglib2.0-0 libglib2.0-tests libglib2.0-udeb libglib2.0-bin 
libglib2.0-dev libglib2.0-0-dbg libglib2.0-data libglib2.0-doc libgio-fam
Architecture: source
Version: 2.50.3-2+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Description:
 libgio-fam - GLib Input, Output and Streaming Library (fam module)
 libglib2.0-0 - GLib library of C routines
 libglib2.0-0-dbg - Debugging symbols for the GLib libraries
 libglib2.0-bin - Programs for the GLib library
 libglib2.0-data - Common files for GLib library
 libglib2.0-dev - Development files for the GLib library
 libglib2.0-doc - Documentation files for the GLib library
 libglib2.0-tests - GLib library of C routines - installed tests
 libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb)
Closes: 929753 931234
Changes:
 glib2.0 (2.50.3-2+deb9u1) stretch; urgency=medium
 .
   * Team upload
   * d/gbp.conf: Add GNOME team configuration
   * d/p/gfile-Limit-access-to-files-when-copying.patch:
 When copying files, give the temporary partial copy of the file
 suitably restrictive permissions (Closes: #929753; CVE-2019-12450)
   * d/p/keyfile-settings-Use-tighter-permissions.patch:
 Create directory and file with restrictive permissions when using the
 GKeyfileSettingsBackend. Mitigation: in this version of GLib, the
 GKeyfileSettingsBackend can only be used explicitly by code, and is
 never selected automatically. (Closes: #931234; CVE-2019-13012)
   * d/p/gmarkup-Fix-unvalidated-UTF-8-read-in-markup-parsing-erro.patch,
 d/p/gmarkup-Avoid-reading-off-the-end-of-a-buffer-when-non-nu.patch:
 Avoid buffer read overrun when formatting error messages for invalid
 UTF-8 in GMarkup (CVE-2018-16429)
   * d/p/gmarkup-Fix-crash-in-error-handling-path-for-closing-elem.patch:
 Avoid NULL dereference when parsing invalid GMarkup with a malformed
 closing tag not paired with an opening tag (CVE-2018-16429)
Checksums-Sha1:
 3e5b3232675ca069efc46ae9b77fb5b400018d0c 3451 glib2.0_2.50.3-2+deb9u1.dsc
 38921822069c760ce1c33c3149bccba85b4dd617 74472 
glib2.0_2.50.3-2+deb9u1.debian.tar.xz
 bf82692a5f402b317d78c4caf09e7f1e75f4b225 8351 
glib2.0_2.50.3-2+deb9u1_source.buildinfo
Checksums-Sha256:
 1ec772f446253b189271f35106e39aa84a74a57796c9b1d09f3fe4b6f608c1bb 3451 
glib2.0_2.50.3-2+deb9u1.dsc
 305398721ed8c790b677e44850228fd04efd1b9da7181bb0eedd9822ad7ff5d7 74472 
glib2.0_2.50.3-2+deb9u1.debian.tar.xz
 839929c489ef87be82d541629a5db6ea1dac906b730ff8da2ffcb2c8247c05fe 8351 
glib2.0_2.50.3-2+deb9u1_source.buildinfo
Files:
 14c3dfb0b47583e8cd5eec5dd9deea7e 3451 libs optional glib2.0_2.50.3-2+deb9u1.dsc
 de5bf0d8a60c964623e45a307f51f7be 74472 libs optional 
glib2.0_2.50.3-2+deb9u1.debian.tar.xz
 370e1f749acbbb8173e9a4621532bd6c 8351 libs optional 
glib2.0_2.50.3-2+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=K3YH
-END PGP SIGNATURE-



Accepted glib2.0 2.58.3-2+deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-08-21 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 30 Jul 2019 10:41:51 +0100
Source: glib2.0
Architecture: source
Version: 2.58.3-2+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 931234
Changes:
 glib2.0 (2.58.3-2+deb10u1) buster; urgency=medium
 .
   * Team upload
   * d/p/keyfile-settings-Use-tighter-permissions.patch:
 Backport patch from upstream 2.60.0 so that the GKeyFile settings
 backend creates ~/.config and configuration files with restrictive
 permissions (Closes: #931234, CVE-2019-13012)
   * d/gbp.conf: Swap branch to debian/buster
Checksums-Sha1:
 c3e61629e400062b8bdc9c54f8538f75f0af5fc2 3422 glib2.0_2.58.3-2+deb10u1.dsc
 9b7d6d2477ee18e12b3723094855b2e5edf4f127 86012 
glib2.0_2.58.3-2+deb10u1.debian.tar.xz
 0daf89914eabb3745219b39a6dd407ceaa6b2db2 8130 
glib2.0_2.58.3-2+deb10u1_source.buildinfo
Checksums-Sha256:
 a1bcfcce21ce7cd6b4bae65c2fee5291a72a38ceab8b9bfe0d120f92755725e2 3422 
glib2.0_2.58.3-2+deb10u1.dsc
 bc2a0a7f00953e573d38a7d5aec92acf3e7822726f53b8c301e88a07dfc0cffa 86012 
glib2.0_2.58.3-2+deb10u1.debian.tar.xz
 0635ea59c357b244890986f091527e1f26584e18aa90b9c95b08eba1d1eea34d 8130 
glib2.0_2.58.3-2+deb10u1_source.buildinfo
Files:
 6e18615dba51886df563e39b001d747e 3422 libs optional 
glib2.0_2.58.3-2+deb10u1.dsc
 9782e76614cee5b9a9a726f5cc0c4f7e 86012 libs optional 
glib2.0_2.58.3-2+deb10u1.debian.tar.xz
 9b36254f093ba3e8d072dc83ce77acfa 8130 libs optional 
glib2.0_2.58.3-2+deb10u1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=vk7g
-END PGP SIGNATURE-



Accepted pango1.0 1.42.4-7~deb10u1 (source) into proposed-updates->stable-new, proposed-updates

2019-08-12 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 11 Aug 2019 12:14:09 BST
Source: pango1.0
Architecture: source
Version: 1.42.4-7~deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian GNOME Maintainers 

Changed-By: Simon McVittie 
Closes: 933860
Changes:
 pango1.0 (1.42.4-7~deb10u1) buster-security; urgency=medium
 .
   * Team upload
   * Rebuild for buster-security
   * d/gbp.conf: Set upstream branch to upstream/1.42.x
   * d/gbp.conf: Set packaging branch to debian/buster
 .
 pango1.0 (1.42.4-7) unstable; urgency=medium
 .
   * Team upload
   * d/p/bidi-Be-safer-against-bad-input.patch:
 Fix heap overflow when acting on malformed UTF-8.
 (Closes: #933860; CVE-2019-1010238)
Checksums-Sha256: 
 48cb653f7a82d8127192e71ca644544f94bac7f882565f40f74b5dbe74c3d00e 3301 
pango1.0_1.42.4-7~deb10u1.dsc
 ceb9b2f2b01b8ab0f46f73078f04ea57805d8106de4369a13b507cba74034d6e 50480 
pango1.0_1.42.4-7~deb10u1.debian.tar.xz
 abcfd798adc216a4922faf1ec962e2ba960e571b0aaa380396e21c45d017aa2e 9405 
pango1.0_1.42.4-7~deb10u1_source.buildinfo
 1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d 833876 
pango1.0_1.42.4.orig.tar.xz
Checksums-Sha1: 
 9d45bdb4ead3cd186963146b7de6f25362d7b22c 3301 pango1.0_1.42.4-7~deb10u1.dsc
 b1ba66ca8c892646fedb2466e2431f4e434487f5 50480 
pango1.0_1.42.4-7~deb10u1.debian.tar.xz
 3e80b72b12c5831c18761c426778551520320302 9405 
pango1.0_1.42.4-7~deb10u1_source.buildinfo
 240942b1307eaa3819e6e534596271c57cd75457 833876 pango1.0_1.42.4.orig.tar.xz
Files: 
 22acf92534038c178d7c712fb61d3f59 3301 libs optional 
pango1.0_1.42.4-7~deb10u1.dsc
 dba269476a005296084ca3f56d8f4ab2 50480 libs optional 
pango1.0_1.42.4-7~deb10u1.debian.tar.xz
 f03b452a09c73cb159e47c44cd493e92 9405 libs optional 
pango1.0_1.42.4-7~deb10u1_source.buildinfo
 deb171a31a3ad76342d5195a1b5bbc7c 833876 libs optional 
pango1.0_1.42.4.orig.tar.xz

-BEGIN PGP SIGNATURE-
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=iYHx
-END PGP SIGNATURE-



Accepted dbus 1.10.28-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2019-06-18 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 09 Jun 2019 22:42:06 +0100
Source: dbus
Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session 
dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev
Architecture: source
Version: 1.10.28-0+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-tests - simple interprocess messaging system (test infrastructure)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-user-session - simple interprocess messaging system (systemd --user 
integration)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.10.28-0+deb9u1) stretch-security; urgency=medium
 .
   * New upstream stable release
 - CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
   authentication for identities that differ from the user running the
   DBusServer. Previously, a local attacker could manipulate symbolic
   links in their own home directory to bypass authentication and
   connect to a DBusServer with elevated privileges. The standard
   system and session dbus-daemons in their default configuration were
   immune to this attack because they did not allow DBUS_COOKIE_SHA1,
   but third-party users of DBusServer such as Upstart could be
   vulnerable.
 - Prevent reading up to 3 bytes beyond the end of a truncated message.
   This could in principle be an information leak or denial of service
   on the system bus, but is not believed to be exploitable to crash
   the system bus or leak interesting information in practice.
 - Stop the dbus-daemon leaking memory (an error message) if delivering
   the message that triggered auto-activation is forbidden. This is
   technically a denial of service because the dbus-daemon will
   run out of memory eventually, but it's a very slow and noisy one,
   because all the rejected messages are also very likely to have
   been logged to the system log, and its scope is typically limited by
   the finite number of activatable services available.
 - Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
   which does not meet the criteria for that attribute in gcc 4.7+,
   potentially leading to miscompilation.
 - Fix build with gcc 8 -Werror=cast-function-type
 - Fix warning from gcc 8 about suspicious use of strncpy() when
   populating struct sockaddr_un
 - Fix installation of Ducktype documentation with newer yelp-build
   versions
   * d/control: Update Vcs-Git, Vcs-Browser
Checksums-Sha1:
 90601f09ea799f8f73742263a29223a50234d0fc 3345 dbus_1.10.28-0+deb9u1.dsc
 3177c3f8e65629dd6be7b60002da80d6bf5366f4 1998830 dbus_1.10.28.orig.tar.gz
 5a7d04e09c0c220b1d035d6a03dab96655cfdbee 833 dbus_1.10.28.orig.tar.gz.asc
 88373bc62a77b94a24893399e62d5e44dea135c1 57500 
dbus_1.10.28-0+deb9u1.debian.tar.xz
 f90bb1acac6c403a7ae9c472e49d653dd2309479 8031 
dbus_1.10.28-0+deb9u1_source.buildinfo
Checksums-Sha256:
 a4758356f5a71e87804f3b55e1f83f41c10b19ddb84595e322eeb2cd44cdb367 3345 
dbus_1.10.28-0+deb9u1.dsc
 63f5b1d57360be5c147ef561e67f8efdd9034e1f12b7aba41feb42b376324552 1998830 
dbus_1.10.28.orig.tar.gz
 5da985dafdf223b7f5e0c6e51c608fd7d87e681e0c1eccfa2970be2978c0bed9 833 
dbus_1.10.28.orig.tar.gz.asc
 83c883431ee58fbfd7dcae4c763baa904e14b835023edff0dd495270d56d59b3 57500 
dbus_1.10.28-0+deb9u1.debian.tar.xz
 f6cf9cfa2d44a4759ab174a38c97808729c09e9c6c292cd1ee30484d8080c34f 8031 
dbus_1.10.28-0+deb9u1_source.buildinfo
Files:
 38180eef98e7ca9f6c33e6b5742f087c 3345 admin optional dbus_1.10.28-0+deb9u1.dsc
 9c853418bdc44df243e51aacfa6257c3 1998830 admin optional 
dbus_1.10.28.orig.tar.gz
 b51f95419107e9b0f52485498df5589e 833 admin optional 
dbus_1.10.28.orig.tar.gz.asc
 5477e85465b0697f4ca759e8774280e0 57500 admin optional 
dbus_1.10.28-0+deb9u1.debian.tar.xz
 620d351fbf97d418e600493f8981e0f1 8031 admin optional 
dbus_1.10.28-0+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl0BQNkACgkQ4FrhR4+B
TE/7/w//WmqVkiGJslULEoy9b45IF4d3OMCkO6ztAphi/S7d52W8+iRh/J/VRsJs
8ZJnpXC+xgBKei35+oj2XGUjyxtV8IR6qKh4lxgjIzQLDTUqrVxWboNDgXELrY59
KoSWV/E9lBlpsYBSFqFui/C1s7uPgID8RndQMhgHNEHmJLD1jhEzQKAEOZLemuWX
A0kblQnCTb+OEhfn6FeaGGPB5BSbLoNgMkx0Lj1e0Gne5CFxgU4w5cDuCuFXZIQC
PBR3PvwzhsW22HZW3i5qpjKLj++dzRpg4h5ACq55Pf/zyof7ZDtS2R4Ew+A3xADm
ADQMNCw++LBvhI/Ij3LeZ57ltyHDioRjOz5sX6UEZ3/jtaNd5wSwgP1snJzFb2pI

Accepted flatpak 0.8.9-0+deb9u3 (source) into proposed-updates->stable-new, proposed-updates

2019-04-14 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 26 Mar 2019 21:11:16 +
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.9-0+deb9u3
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Closes: 925541
Changes:
 flatpak (0.8.9-0+deb9u3) stretch; urgency=medium
 .
   * d/p/run-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch:
 Reject all ioctls that the kernel will interpret as TIOCSTI,
 including those where the high 32 bits in a 64-bit word are nonzero.
 (Closes: #925541, CVE-2019-10063)
Checksums-Sha1:
 6ed2af8f2ffd9fc2bfeda9eeb2e79a849a5cc093 3021 flatpak_0.8.9-0+deb9u3.dsc
 ac006afff371083fc5693ef110ab784e45401c5d 18992 
flatpak_0.8.9-0+deb9u3.debian.tar.xz
 adc1bd1077ecc95489e8c6ee045271b4cad3bf0e 11061 
flatpak_0.8.9-0+deb9u3_source.buildinfo
Checksums-Sha256:
 d6c26bb4a80806a87a7ee7b989f38c33bfdb721a04b20dab22d16ec51f06bce6 3021 
flatpak_0.8.9-0+deb9u3.dsc
 b63eef3db93fd97fa9ab91cbae11b3805b8b614f52b94f4dc25f9d6becd89470 18992 
flatpak_0.8.9-0+deb9u3.debian.tar.xz
 7806e7d6489595edc5c7081f62e0d8e7bccd76c6e5a355bc8c965d05dc1a4ba1 11061 
flatpak_0.8.9-0+deb9u3_source.buildinfo
Files:
 0403edcbc763ae0fbb3d2a417e154ca6 3021 admin optional flatpak_0.8.9-0+deb9u3.dsc
 e10033597546a3d38d985a077258e78d 18992 admin optional 
flatpak_0.8.9-0+deb9u3.debian.tar.xz
 c91fac71fc3e57f27cc8f8e3a4a3a692 11061 admin optional 
flatpak_0.8.9-0+deb9u3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=sQWO
-END PGP SIGNATURE-



Accepted ikiwiki 3.20170111.1 (source) into proposed-updates->stable-new, proposed-updates

2019-03-07 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 26 Feb 2019 22:57:58 +
Source: ikiwiki
Binary: ikiwiki
Architecture: source
Version: 3.20170111.1
Distribution: stretch-security
Urgency: high
Maintainer: Simon McVittie 
Changed-By: Simon McVittie 
Description:
 ikiwiki- wiki compiler
Changes:
 ikiwiki (3.20170111.1) stretch-security; urgency=high
 .
   * aggregate: Use LWPx::ParanoidAgent if available.
 Previously blogspam, openid and pinger used this module if available,
 but aggregate did not. This prevents server-side request forgery or
 local file disclosure, and mitigates denial of service when slow
 "tarpit" URLs are accessed.
 (CVE-2019-9187)
   * blogspam, openid, pinger: Use a HTTP proxy if configured, even if
 LWPx::ParanoidAgent is installed.
 Previously, only aggregate would obey proxy configuration. If a proxy
 is used, the proxy (not ikiwiki) is responsible for preventing attacks
 like CVE-2019-9187.
   * aggregate, blogspam, openid, pinger: Do not access non-http, non-https
 URLs.
 Previously, these plugins would have allowed non-HTTP-based requests if
 LWPx::ParanoidAgent was not installed. Preventing file URIs avoids local
 file disclosure, and preventing other rarely-used URI schemes like
 gopher mitigates request forgery attacks.
   * aggregate, openid, pinger: Document LWPx::ParanoidAgent as strongly
 recommended.
 These plugins can request attacker-controlled URLs in some site
 configurations.
   * blogspam: Document LWPx::ParanoidAgent as desirable.
 This plugin doesn't request attacker-controlled URLs, so it's
 non-critical here.
   * blogspam, openid, pinger: Consistently use cookiejar if configured.
 Previously, these plugins would only obey this configuration if
 LWPx::ParanoidAgent was not installed, but this appears to have been
 unintended.
Checksums-Sha1:
 8c7ec3f78150f5c57ddbcc64df5c86cd222bc1ba 2223 ikiwiki_3.20170111.1.dsc
 9b6b95c1da66d4492f5d935db0df73f3b949faa2 2618416 ikiwiki_3.20170111.1.tar.xz
 15e570feae476535dba5b0fe5722cdb5529c255f 5494 
ikiwiki_3.20170111.1_source.buildinfo
Checksums-Sha256:
 7ae898ad6564010f968ea260edcc9364110f46b2c3f8152285efd179bd127f01 2223 
ikiwiki_3.20170111.1.dsc
 443039c9b0ae748d7cb80543a217ac4074cc32a89d12c52ff5ff39e836b70488 2618416 
ikiwiki_3.20170111.1.tar.xz
 a5733c439bc019713e95919c6530e686bad797f3769f445eaf1f981f1528c013 5494 
ikiwiki_3.20170111.1_source.buildinfo
Files:
 b7fd75ad3a26cb0d7b38eee430963f03 2223 web optional ikiwiki_3.20170111.1.dsc
 707a04bb99abf54670dfb7f60b76723e 2618416 web optional 
ikiwiki_3.20170111.1.tar.xz
 1bfe891d16b617d2b4d8d0b32f59819b 5494 web optional 
ikiwiki_3.20170111.1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=A7Dm
-END PGP SIGNATURE-



Accepted flatpak 0.8.9-0+deb9u2 (source) into proposed-updates->stable-new, proposed-updates

2019-02-18 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 12 Feb 2019 11:11:22 GMT
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.9-0+deb9u2
Distribution: stretch-security
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Closes: 922059
Changes:
 flatpak (0.8.9-0+deb9u2) stretch-security; urgency=medium
 .
   * d/p/Don-t-expose-proc-when-running-apply_extra.patch:
 Backport patch from upstream v1.2.3: do not let the apply_extra
 script for a system installation modify the host-side executable
 via /proc/self/exe, similar to CVE-2019-5736 in runc
 (Closes: #922059)
Checksums-Sha256: 
 c4f7e8525e3e4925fc297b6f17c3105e10c8fa7d5639a781bbb309acdbf221cf 3021 
flatpak_0.8.9-0+deb9u2.dsc
 5f72c9e7aa686c78dc4b30df5b674f1df906a38488be4116c967a31b9b23 18448 
flatpak_0.8.9-0+deb9u2.debian.tar.xz
 718c66e0d49b98937ab19d8faae61a25d62c02419ac7498efd2cf09c834543c9 11061 
flatpak_0.8.9-0+deb9u2_source.buildinfo
 9df2823e12461c96c87d1e3cadf49963b5fefb6be8ad04dafb84c58b8bcbbf50 750480 
flatpak_0.8.9.orig.tar.xz
Checksums-Sha1: 
 cdfe6e1ccad08e44e91cbdf55ea85833a3fcb14b 3021 flatpak_0.8.9-0+deb9u2.dsc
 074125b318afa8d1cf46265db6d115845cc92b5e 18448 
flatpak_0.8.9-0+deb9u2.debian.tar.xz
 a58f816ac04b05688c24ad962bcd9598ed81aab1 11061 
flatpak_0.8.9-0+deb9u2_source.buildinfo
 d52bd785423ea882df548aa71d6fcd2f4db09e83 750480 flatpak_0.8.9.orig.tar.xz
Files: 
 b8a48cc8727c08982b0efb0bf9dbcabd 3021 admin optional flatpak_0.8.9-0+deb9u2.dsc
 ba10d2c52e936067fa6767374480729d 18448 admin optional 
flatpak_0.8.9-0+deb9u2.debian.tar.xz
 96569213028c0e185bd5f16cb3b84e15 11061 admin optional 
flatpak_0.8.9-0+deb9u2_source.buildinfo
 9e4dd45c0b7082063bab9fc688a5b26e 750480 admin optional 
flatpak_0.8.9.orig.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlxiqfcACgkQ4FrhR4+B
TE9WiRAAn7/qVCufVOqyyGFapX0vOUgyDUJBEFtGIWlPAuFwMTIWYKK0ICtM4v2L
mvEsOdelDAK/6Fc6B2VY9KshSr1AIAwEqUUAF621L7QW4OcFKLzFcbT1BRFoHhts
n7u1kgr9el+h4Y+7RVlizDvgT0mG3SrJJUIEhA2VLzQlDAhQpAgYYAFusVRs9YJt
fAMz0ofron0WtG/vAcNHgfSwKC+quH8XhPOdSisiNapDlOjmCcFwuXoby+SwrBYY
jKcwAPhNJH59Ad5Wle85toiulhnMUeLqvbR5Cbnb7wrnCqaGl/aC2ZPMMoAcLzGs
Ki+aydR4xn5AnAhJDcDWjFPHPuSwe/9pmHfdXbgwNK+HlCO3JFkWP4LDbzKZ9ryQ
/7W/Q+lwWdw26z/Sa+2oifxv+X1dvQMzM2f1MXDl8G1omBvTsB9kjN0hJ4oTdZ7M
q2KPi976h18D6DCoFa+lBxflGmclyxzyCfOHdS2GgqnmXe2QVjna2dkZrPahhYSo
zMhBP3RIV4YaTTyYi5Nn3LuUUf1rKBXexCoc60O5Tex9DJdpbBwkstwliZi3caTm
mo1SD5gcgekM3+0nnKupY8kKnycwbEPq3qUR7qyd3oscLMGN3mKTCnFvMebXlgC0
6BUK5G33wINp9GivPpWKZjes01jky4w7xLvuJ8TtZ7LisampDeg=
=gDG7
-END PGP SIGNATURE-



Accepted dbus 1.10.26-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2018-03-03 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 02 Mar 2018 08:59:25 +
Source: dbus
Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session 
dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev
Architecture: source
Version: 1.10.26-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-tests - simple interprocess messaging system (test infrastructure)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-user-session - simple interprocess messaging system (systemd --user 
integration)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.10.26-0+deb9u1) stretch; urgency=medium
 .
   * New upstream stable release
 - bus/bus.c: Raise file descriptor limit sooner, while we still can
   (before we drop privileges), fixing a regression in 1.10.18 which
   negated a previous fix for local denial of service via resource
   exhaustion
 - test/*, build system: Add a regression test for the above
   * d/tests/root: Re-run test-dbus-daemon as root, since it now contains
 tests that are skipped as non-root
   * d/tests/root: Allow stderr output, because test-dbus-daemon emits
 some (and it is not a problem)
Checksums-Sha1:
 bf53921069a610dcdcd812671ca25cc1e648 3101 dbus_1.10.26-0+deb9u1.dsc
 8f71a1b7322af88dc47a36d7276dbdec8a6a0ea2 1992385 dbus_1.10.26.orig.tar.gz
 01abc801a117c060de93f99b2cde5134bd215afc 56916 
dbus_1.10.26-0+deb9u1.debian.tar.xz
 b6e629c7639076fd5f7a2a8ba597c077b93ee765 7743 
dbus_1.10.26-0+deb9u1_source.buildinfo
Checksums-Sha256:
 94613920acebc29acae80a32e95b31ae078c2a92d663eaee58fd44e793d53f0a 3101 
dbus_1.10.26-0+deb9u1.dsc
 358abe5db6a24128c3ffd1242b26774f6c9877429c15aa1df9294e917ae1ac01 1992385 
dbus_1.10.26.orig.tar.gz
 d077aa44c738d5101a9292db503fd751fdc50afbb2d72eac2a034eeca8d5b9c2 56916 
dbus_1.10.26-0+deb9u1.debian.tar.xz
 6a05d55c6d324945a7c6295cd8a30eaf9a81b1417e4b40f6e41150720d844a4e 7743 
dbus_1.10.26-0+deb9u1_source.buildinfo
Files:
 c4fcac44715b75360d91898371219a2a 3101 admin optional dbus_1.10.26-0+deb9u1.dsc
 5a068adf7811e53dd061866ecfd4d689 1992385 admin optional 
dbus_1.10.26.orig.tar.gz
 857143c0867bb4f43d689b32b45fab46 56916 admin optional 
dbus_1.10.26-0+deb9u1.debian.tar.xz
 bd6d4721bc20b87dcc7d6a106702bed2 7743 admin optional 
dbus_1.10.26-0+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlqbF0gACgkQ4FrhR4+B
TE+fjRAAo4hSVV5dQzkGreu7rj8Q7C+CPFCoo4Q5cC3h2TfeV/j9nPI4FKC0nISH
nsxXLcgjHRTd4yIkE49J1qf4Wk409vIw7KJ2hm/fRz5q9wVeumRU3rVTO8AEgXbe
c4LMbJBaIqw001/1B6Bsa6xcPnodOm8FdTI48qjKeE9qNdog7neeNp67JY4qvEso
GzugqCgtA2/ishD9dqox/WZ39YzZLUU2pJjSzjE6jBwziooEqi7j3YGkiZYFDbhm
s1E5/XQ8SZBBDCmV1gPL3I271yRdwPR6oesypogvbeESM22kxLgpoAoWn+Qm4Jmt
DTJytscz2ILdZEVduOoVBKViGC5QzQrBsWbDRCf0Z6QmX4y15bsS6ImBGQwm7XKb
34HSKOA/QcA+U1vCXR4vH4QhQJvGOpjmaTqExfU06mtrjh90MYJbvqyo1bCLLFFL
tiphj82J+RNViSH52Kd+8he9MftkFUnuaBTlT6xDxQfhaT4ZJWv1TmsSXt+/Bg5F
KIv31+O7WEroMrJ6CelwucZgW4Oha6QW4jpYkxllJ4O0HVrS/zjpJcS6QjVpPDHJ
v1eogEjh5tTA3ASXVzhh9qxnKR47OU7LatzBGXa4EwzOO4Gz7SJs53lY4swhFWmk
HWA9+scjS9N11oeERTIZIsUZfNoxwMzdCqp56bDaliM0tTFSRCo=
=8mzS
-END PGP SIGNATURE-



Accepted flatpak 0.8.9-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2018-02-25 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 30 Jan 2018 14:49:40 +
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.9-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Closes: 42
Changes:
 flatpak (0.8.9-0+deb9u1) stretch; urgency=medium
 .
   * New upstream release backporting the following fixes from 0.10.x:
 - common/flatpak-run.c: Ignore unrecognised permission strings
   instead of failing, for forwards compatibility
 - dbus-proxy/flatpak-proxy.c: Fix a D-Bus filtering bypass in
   flatpak-dbus-proxy (Closes: #42)
 - profile/flatpak.sh.in: Simplify and improve profile.d snippet
   (already done in Debian since 0.8.4-1, no practical effect)
   * Drop our patch to profile/flatpak.sh.in, no longer necessary
   * debian/control: Update Vcs-* metadata for salsa.d.o migration
Checksums-Sha1:
 d4bc6ad8d04104c6f8960a1f98d0b42a8b7b2ece 3021 flatpak_0.8.9-0+deb9u1.dsc
 d52bd785423ea882df548aa71d6fcd2f4db09e83 750480 flatpak_0.8.9.orig.tar.xz
 49cafbd9250e54f8b9a480e2591fcda37a4f9110 17472 
flatpak_0.8.9-0+deb9u1.debian.tar.xz
 30557a01efbbac3e135f0d692ddbca21fa60cc6c 10692 
flatpak_0.8.9-0+deb9u1_source.buildinfo
Checksums-Sha256:
 c11b4a27f51c6e9909b486e175552a09e756132713ccb67a504a315a159f82e9 3021 
flatpak_0.8.9-0+deb9u1.dsc
 9df2823e12461c96c87d1e3cadf49963b5fefb6be8ad04dafb84c58b8bcbbf50 750480 
flatpak_0.8.9.orig.tar.xz
 92a4f709d0b7c2c659ec78d47de178a2ab2b72cea81a8e49b5c0a6f4c6f2b992 17472 
flatpak_0.8.9-0+deb9u1.debian.tar.xz
 fa65e63fd5668b51e758b1da5c2b87e3e43604974e59bd368cde1df735f6de21 10692 
flatpak_0.8.9-0+deb9u1_source.buildinfo
Files:
 44c8b5dcea855ed5530e703ddcd7cb8c 3021 admin optional flatpak_0.8.9-0+deb9u1.dsc
 9e4dd45c0b7082063bab9fc688a5b26e 750480 admin optional 
flatpak_0.8.9.orig.tar.xz
 f534975d96b2412e4d7899bd7e583acd 17472 admin optional 
flatpak_0.8.9-0+deb9u1.debian.tar.xz
 8054097cd2df861987d211595e903a13 10692 admin optional 
flatpak_0.8.9-0+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlqQoiAACgkQ4FrhR4+B
TE/qLRAArC3afQ4ThXDAbuM3b6XHMY2a4hswimUXYnhujQic3dDptiaOWCRoc31O
XZSanIGyAL2AU1TVtBOd5V7YWNWO4ajwJsCWXfBfDIw7h06mXvotfPE/HFZgUw8g
y9RVpSs8GcLkBshO1UzcgbNWUnCxG5dK0axeMrJ1lokJ6pyT/ZaKs/HgjZxfoZIf
rNOtOTW1L1Z8OnsrabkWcELoHblj4w2PLKxcQN82fHA+CA82Kk6J/OIS3QWZ6T7e
3XQF2iG0C3PMZUe/X1kIfoXtEuD/tiqwtCdQvWnoD+wi179SaI12+FcClgcB0kZb
X27WA4gGOsUF4pGlZON2wd0w0Zu+afCEHOWOxMf55Q4SRr8OtWl9gEyw/KLo7XGJ
3M1YFvYr9YritMr0JxXaqOgY0c1dLpFfbXuQjnuLF+gLJboLJTWWXL8iaMQEwH3k
dpzqWYZ7T/YpaXKzw76APVQr//Si6V5nJyd/cb0Jef8TpaMoVpnFjKaruDkGXVej
+IuAUity0KE1VBFGKPQmke1J7tzjQslcQ0DbMyp8WG+MPxace/OPSFi/b7y9wEIy
g0kRYc6Z7lWTleBjxRzKDYNKmJga5CJGpOB1mGqGN3UqoMJfmsZGNyKHcy624Mgd
rx7t65E8i1hmSzKwwTSDqrw0qNzMyh2x/BO4fCyLrThlEZnhV4o=
=0159
-END PGP SIGNATURE-



Accepted flatpak 0.8.8-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2018-02-14 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 31 Oct 2017 18:51:01 +
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.8-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
 libflatpak0 - Application deployment framework for desktop apps (library)
Closes: 880451
Changes:
 flatpak (0.8.8-0+deb9u1) stretch; urgency=medium
 .
   * d/watch: Watch for new 0.8.x versions
   * New upstream release from 0.8.x branch, backporting the following
 fixes from 0.10.x:
 - Add compatibility with ostree ≥ 2017.7 (in Debian, the same
   changes were already in 0.8.7-2)
 - Security: Do not allow legacy eavesdropping on the D-Bus
   session bus (Closes: #880451)
 - Ensure that LD_LIBRARY_PATH is in the correct order, respecting
   extensions' priorities
 - Ensure that extensions are mounted in the correct order even if
   they have differing priorities, fixing Steam
 - Remove PYTHONPATH, PERLLIB, PERL5LIB, XCURSOR_PATH from the
   environment given to sandboxed apps
 - Give each app a persistent cache directory for fontconfig
 - Make /usr/share/icons available in the sandbox so that sandboxed
   apps can use the host's icon theme
 - Disable debug-level FUSE logging for the document portal
 - Make the * wildcard at the end of a D-Bus filtering rule match
   zero or more components, so --talk="com.example.Foo.*" behaves
   the same as D-Bus' arg0namespace="com.example.Foo". Previously,
   it would only match exactly one component. This matches a proposed
   design for integrating equivalent filtering into future dbus
   versions.
   * d/p/0.8.8/: Drop patches that added compatibility with
 ostree ≥ 2017.7, no longer necessary
Checksums-Sha1:
 f75e557f0767771138ead79a4dafbee4282a4340 3050 flatpak_0.8.8-0+deb9u1.dsc
 a2aaeced6ca28308e3208640f7a33b36d476c6fb 749940 flatpak_0.8.8.orig.tar.xz
 7600207e7a2c0e7e3aa99cf0f0fd5d18c2107671 18052 
flatpak_0.8.8-0+deb9u1.debian.tar.xz
 fcb4a238a8c5f91cc0a92a8bb7a0d8bcde3a6672 10615 
flatpak_0.8.8-0+deb9u1_source.buildinfo
Checksums-Sha256:
 e3bb014465ebcb9829b494915053e177d924896faa644afbe7f901fc1e66d8b9 3050 
flatpak_0.8.8-0+deb9u1.dsc
 4fb500ad371e6693a9a68f4511665f6ac3c0ec18ef0ffd882409d90366386a36 749940 
flatpak_0.8.8.orig.tar.xz
 9c432b725a8c2b83caad9d6df9835400401fe7ac4c9fe59b15067d140db16f8f 18052 
flatpak_0.8.8-0+deb9u1.debian.tar.xz
 ec03a04382327959572de3ec26ed87b3e996ed18363094b543f90c41ede3998c 10615 
flatpak_0.8.8-0+deb9u1_source.buildinfo
Files:
 1e41574f66cf4af733e0492183387ee8 3050 admin optional flatpak_0.8.8-0+deb9u1.dsc
 295f69da11e034a8abff8ed5e017ea90 749940 admin optional 
flatpak_0.8.8.orig.tar.xz
 7dd07869924228a4f83b3f0d5b67f1e1 18052 admin optional 
flatpak_0.8.8-0+deb9u1.debian.tar.xz
 f488c41c0c2405b594854448eca10e74 10615 admin optional 
flatpak_0.8.8-0+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlpaOWYACgkQ4FrhR4+B
TE+REA//YV1XVCHdZCrxy/TKnJxgWlyqIje7L4GlZoWeiKTqdYCfWpQPrk9HN6Hy
Cdyzv86lvy3qIVStZgXOKZk+67ViJeyZd6A2aImh/2B5pKZvfhbxl72r8LxXZPVS
G5Zh/fapBvsWijqtrWkqEWATanOGEh9qAdGKvybvuBtmnzFlvSqYAYUNHAc5MWg+
vKvMabQGuAw4nP8fukMvt2eAHVZF/KFqBvTlepCSbmU1yCKyd/KrHxnVZeDXtIX2
J0aZcVfaijm2d8p10nUra6dWMMK1edwdU/6ocpAguTGgSUebq9KGRfJvXvQx2FKi
A7AhnXfiMDXEvp2+ASpwPgzy63QVnD2UV3fe8Q1ajT/VpfFf0lBmpxCIRkIcrn9E
QKuj+riYXGT3vdAtOEmS3NIOSkoRurC8eqIfR/aFnC2wWjGVDuziZOyrtJMpTA8C
WO9uETUlLZxyUpr4Labh2RYzT1Hg7X0inJaZ1FnHKFeTPNAJZ35ljAfxKq+rwuk9
5Jk4RjkYHOHFxRHR2PBuyrm2g5Unt9j3DytrIjiTtVhKzUKluHIqOjLREPh3Enc6
sIXl2dPQZ59Pt5UJt5emjM0g+bXr1NWUQnuGF+CoUjQjXISasrpNO0PchjSYQ9i3
6Jf0BC3YkVxGDoE2ldKdo9fgFO0wOXPvVJTKWmQVvlIjAeAp2r4=
=HppI
-END PGP SIGNATURE-



Accepted dbus 1.10.24-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-11-24 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 01 Oct 2017 12:09:14 +0100
Source: dbus
Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session 
dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev
Architecture: source
Version: 1.10.24-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description:
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-tests - simple interprocess messaging system (test infrastructure)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-user-session - simple interprocess messaging system (systemd --user 
integration)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Closes: 872144
Changes:
 dbus (1.10.24-0+deb9u1) stretch; urgency=medium
 .
   * New upstream stable release
 - dbus/dbus-sysdeps-unix.c: Increase listen() backlog of
   AF_UNIX sockets to the maximum possible, minimizing failed
   connections under heavy load (Closes: #872144)
 - bus/config-loader-expat.c: When parsing dbus-daemon
   configuration, don't delay startup if high-quality entropy
   is not yet available: we trust the configuration anyway, so
   algorithmic complexity attacks via hash table collisions
   are not a concern
 - bus/*: When using the Monitoring interface, match message
   filters that specify a destination correctly
   - test/monitor.c: Add test-cases for this
 - tools/dbus-send.c: Avoid a compiler warning when gcc gets
   confused about a conditionally-initialized variable
 - dbus/dbus-sysdeps-unix.c: Avoid a compiler warning on Solaris
   (not relevant to Debian)
Checksums-Sha1:
 5a43c103feb3ff5f371d73a4737c7ba78312d735 3342 dbus_1.10.24-0+deb9u1.dsc
 85585fdfbaf83b7183f70eb840727172206592f9 1991358 dbus_1.10.24.orig.tar.gz
 22a602e6a5438c4d2ebe2c46e5790fe80437072d 833 dbus_1.10.24.orig.tar.gz.asc
 5d46f56c761189d5159850b2f9506f9fa2ba4dec 56644 
dbus_1.10.24-0+deb9u1.debian.tar.xz
 39057e408e58f0aa4beed6e9ebb499a798dd2418 7606 
dbus_1.10.24-0+deb9u1_source.buildinfo
Checksums-Sha256:
 1df04f5eddb3d4b19c4b8f032e99f6749aaac4492a83e9880ccd8b2578793b47 3342 
dbus_1.10.24-0+deb9u1.dsc
 71184eb27638e224579ffa998e88f01d0f1fef17a7811406e53350735eaecd1b 1991358 
dbus_1.10.24.orig.tar.gz
 118f0f3ac8f2669598edab73c65eabaad1ef6c8d75a4827e4cd20f45b7de24f1 833 
dbus_1.10.24.orig.tar.gz.asc
 1639c4dd144cd1868e3b3ad64eb8c8ab4357951d467c07ab459e0b0fc7dafc6b 56644 
dbus_1.10.24-0+deb9u1.debian.tar.xz
 d599293173087a1460b2de5a19ea0af25821bb861399d231ed8df857f2907199 7606 
dbus_1.10.24-0+deb9u1_source.buildinfo
Files:
 8156dd63e717bf8f11fa6bd344b6fd3f 3342 admin optional dbus_1.10.24-0+deb9u1.dsc
 d548ae16f9a3268fe4650ccc86a3f06f 1991358 admin optional 
dbus_1.10.24.orig.tar.gz
 8df40cd7bc2c291f0b792707ef56 833 admin optional 
dbus_1.10.24.orig.tar.gz.asc
 73ff5b1fc4cdac15d499d5366a4242bd 56644 admin optional 
dbus_1.10.24-0+deb9u1.debian.tar.xz
 cb4c419982d22b151de33af2c349db83 7606 admin optional 
dbus_1.10.24-0+deb9u1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAln3NZcACgkQ4FrhR4+B
TE9HfQ//ZmC8ggIKDerBnyOcsmXdN6W/dR0UHgscw1MBL6vV/pQIWf1qnaJ+7O7l
5/njiS7N8+I8tTLXUMbk3/QZfw4HdxclHUYjp1D+Sy5dc01RdxmqDKixjt6Ximxo
Ypvj3z/ij0H8UiAHywJ1IFd2umviSe1XrqzOcpWmQZcv0Wnf/fLCllbbTx8XwNm/
s2rrOWKX1pVE0KGtl+JK+9pzXFwYwxNvf3prrIk4tCskJ8bxLRDXSyPVmtw7prXS
3faxIttt/XWLWuAGzwV3rjLbdrkIkQvoF0CHgQ3LjCt4UiXB7IzkYAABx0SF2Shl
AmdC0ms1jY7ioLTBlNdcZvazoe8Xw0l3Yw5oP19fRUu3v7V0lq83JWl533a/7aMO
70u8MW3UeTvdJ+GrKhDXxad8Ga2HHB95ITG6ECz5mKqemCMD6vMXV7WQotMxNd4t
itSKfGo/JjXgXsHXB582cr1xicszbr2BopywjNphXd+vi9vfdLjcQlz1YYTsGNpd
05dngYHSiR+HYxkPAxqfsjvbEN434ToAaLEu3mfKZO7iMpEHzzxs0ymhxftPCdSA
SLFDNmCV3D56pCxbi4uJ9ev6aHlDxAlWYBPYGvaYVlpUsaxOlP/YzJYwLBA+Xogi
2PcHq8d4SggvWb8cNNwWivwZaiQUFxlvvhmaOqRkpVj2b7tpnRE=
=3GV+
-END PGP SIGNATURE-



Accepted ioquake3 1.36+u20140802+gca9eebb-2+deb8u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates

2017-08-22 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sat, 12 Aug 2017 10:15:49 -0400
Source: ioquake3
Binary: ioquake3 ioquake3-server ioquake3-dbg
Architecture: source amd64
Version: 1.36+u20140802+gca9eebb-2+deb8u2
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description:
 ioquake3   - Game engine for 3D first person shooter games
 ioquake3-dbg - debug symbols for the ioquake3 game engine
 ioquake3-server - Standalone server for ioQuake3 based games
Closes: 870725
Changes:
 ioquake3 (1.36+u20140802+gca9eebb-2+deb8u2) jessie-security; urgency=medium
 .
   * Add patch from upstream:
 + Address read buffer overflow in
   MSG_ReadBits (CVE-2017-11721) (Closes: #870725)
 + Check buffer boundary exactly in MSG_WriteBits, instead of
   potentially failing with a few bytes still available
Checksums-Sha1:
 74428d865287b740fe942e9c61a1c1de6148bb95 2487 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc
 dbc1bef688c31dde83efce5f289850c7691720d4 21328 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz
 e082506121ad0039040f3e2281bc9c71d3c82dc3 1467444 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 1cb478e031d39aafacfdaca9450c69b4192b4f4b 858832 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 e63c1b73d34d6286529530da8fbaa01213e71bef 5103992 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
Checksums-Sha256:
 c4d7f5d1fcdc4880aae830fa285e3e34d3f92013389e8ad3169bb8d6e9748e4f 2487 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc
 431d0bfd241c03b668496e4d271e0ac687f73acfa3e61afc4a61b1e160bc4821 21328 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz
 fd4620dae688a1da9930ba643d0196564868e31c2b6ff1c9ce070263bf36b093 1467444 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 4b46e8a300db691e4d6482a7dd6b9b8d01193bc098901bb716fbd5edff6edfc4 858832 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 44928de612b490e254e99744230e8fd7759d8d8b4b06de5fc1219e470c94924b 5103992 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
Files:
 15b866d299bd49dadcc34345ef9c174a 2487 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.dsc
 d32e16ee6ae297b0dff0e4c3ba3410d4 21328 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2.debian.tar.xz
 682fabb11d7546db34626145ead2b97b 1467444 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 daf0766b20ff78047d94af3dfdf648b2 858832 games optional 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb
 e65241a904a16c1911b57c85bdf8cde9 5103992 debug extra 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u2_amd64.deb

-BEGIN PGP SIGNATURE-
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=+EfJ
-END PGP SIGNATURE-



Accepted iortcw 1.50a+dfsg1-3+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-08-22 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sat, 12 Aug 2017 01:38:46 EDT
Source: iortcw
Binary: rtcw rtcw-common rtcw-server
Architecture: source
Version: 1.50a+dfsg1-3+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 rtcw-common - common files for Return to Castle Wolfenstein
 rtcw   - game engine for Return to Castle Wolfenstein
 rtcw-server - standalone server for Return to Castle Wolfenstein
Changes:
 iortcw (1.50a+dfsg1-3+deb9u1) stretch-security; urgency=medium
 .
   * 
d/p/security/All-Fix-improve-buffer-overflow-in-MSG_ReadBits-MSG_Write.patch:
 Add patch (from ioquake3 via upstream) to fix a read buffer overflow
 in MSG_ReadBits (CVE-2017-11721)
Checksums-Sha256: 
 e961c6fcc11039429c6c08b9aa48ea37fc244830427cfbb2f3b85169db227d5a 2275 
iortcw_1.50a+dfsg1-3+deb9u1.dsc
 eb3759edd69ba452b32da6d459750eee5a17340116fdf9801a12bd284612f333 34628 
iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz
 3ce3b0c2b8c1f312074fbc0e13999e3fa6f0adb4446c30eb648ca0b8558af8f7 3310804 
iortcw_1.50a+dfsg1.orig.tar.xz
Checksums-Sha1: 
 ac3656719712e4d8ccdda1d449f3146d667dc7cd 2275 iortcw_1.50a+dfsg1-3+deb9u1.dsc
 3329807b406b1909cba3ac7060639502a0c6ba2f 34628 
iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz
 02db7fb3dcac03e61d8e76566559b5b65175955f 3310804 iortcw_1.50a+dfsg1.orig.tar.xz
Files: 
 9543eddbbf8a2a38acf429ec0446fe6c 2275 contrib/games optional 
iortcw_1.50a+dfsg1-3+deb9u1.dsc
 193d64c9f800ed9e7a246620baf34d01 34628 contrib/games optional 
iortcw_1.50a+dfsg1-3+deb9u1.debian.tar.xz
 4990631c91ce3174ddb98746383046f1 3310804 contrib/games optional 
iortcw_1.50a+dfsg1.orig.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlmOlHYACgkQ4FrhR4+B
TE97WRAArsM12RX8Lr34dAJvLKkjEVhyaPnf5D1J3n5KpVru8ZqL09C2Wf6kyWul
FYj3jkZWRIubRpXjuMZbQ7mccLGz12xZU5FFRnvm6cXHCkKorsU9TbIs7MRIdiCy
m3EOYwodTyVxKeTUBm18QymgRhlbni/SHxBV2xjIBqJ0Ek/5cBoh80Vb/elLO3LJ
A3VXXsCuOqk4HgHXUzw1c/gEAxuMS/9yFjLOmZf4VlnsSAg9Pk6+GE0oZydjiA7V
fTMLuStj4YnAjHSLAQ8ofbTjeczJJXlkYAQpADU7Y2OumY+qKlXtrFuw2S0W+ScH
TDaOghi1sj9oZbOOuafeGWxTsCK+NV3FbaciWzIZe/o3qYP5K/dzf7tsrON4IhR4
Y2uq392zUq3qixtjg02hgjxbltoptQ0RChuKCVq1HVmX9bsQ0KtRjbSEw5m+mfFZ
IaBoiwFIZWFtL0r9f/wCcagNAO3NsfznsAKh0TCi6xl/IhHPZEkVYdVzRKD6hn33
WrygGOhM5lNwaYBLqLd5oZGWLwPdsokomCT6qEEKghj1M4FllnfQXHFSvTuW42mS
hofpyZBGheOGXLxBIspUJkgcLv1RYdD4v1z+0wf+N0XzwxKcUZX2hXW6YLThKlt4
w7QxhG2Wfu5fzlpK7RHfyxm+eTlx7Ryo+lloObrIFV10g4RkZmA=
=Ieul
-END PGP SIGNATURE-



Accepted ioquake3 1.36+u20161101+dfsg1-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-08-22 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sat, 12 Aug 2017 01:37:23 EDT
Source: ioquake3
Binary: ioquake3 ioquake3-server
Architecture: source
Version: 1.36+u20161101+dfsg1-2+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 ioquake3   - Game engine for 3D first person shooter games
 ioquake3-server - Engine for 3D first person shooter games - server and common 
file
Closes: 870725
Changes:
 ioquake3 (1.36+u20161101+dfsg1-2+deb9u1) stretch-security; urgency=medium
 .
   * Reference CVE-2017-6903 in previous changelog entry
   * Add patch from upstream:
 + Address read buffer overflow in
   MSG_ReadBits (CVE-2017-11721) (Closes: #870725)
 + Check buffer boundary exactly in MSG_WriteBits, instead of
   potentially failing with a few bytes still available
Checksums-Sha256: 
 61bd336200f9cee4b02f23aa1231cb272bb04cbd711b40e5ec16295ff92b8b4b 2310 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc
 f2fc89d979a84088a08f81debd341a4905dc2149185874d17943d2c2044be151 25268 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz
 16c071721387a37b592aad30ed3eddba66cdea87ad808af85f465396a51f4d0b 1886888 
ioquake3_1.36+u20161101+dfsg1.orig.tar.xz
Checksums-Sha1: 
 ec34c192c83e46aaaedbeffd72a60fe6239a80ee 2310 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc
 47651a22549123ec28a480a100764e47f362c0ff 25268 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz
 1287724135101aeed70f4a3cbb0883ca52995052 1886888 
ioquake3_1.36+u20161101+dfsg1.orig.tar.xz
Files: 
 6e7b750d4288a9a7388e96c2f45ed3ac 2310 games optional 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.dsc
 81a330e471f12813df4ca9207d6417d1 25268 games optional 
ioquake3_1.36+u20161101+dfsg1-2+deb9u1.debian.tar.xz
 d14b0fca7af5ebc86688acd874e49b44 1886888 games optional 
ioquake3_1.36+u20161101+dfsg1.orig.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAlmOlB0ACgkQ4FrhR4+B
TE9ddRAAqhfiJV/e5ctum/N6saW4wJ7HMcWbOgFT/4hnej6me6QwzgMs841imexd
g1c+Pm+frjx3G1L/e3JHy+vPkfycqvSf/8f4QN5NTvrHj5FVfdV/9m6VHA4MZRlf
VyDd1j5xD1KJhq3/r+NqmvQLft4JOaQMFbh8fkykxIKVR27S/mhhZxMAk0cEgIKw
aoxZ7GWOA1JfaSfoW6A0e1Fn+uRpZcxGZOpe6CJmBiUaESNGUITb4+lw7E7N+FzG
5a3xedYqdLW+WfdbzwqZ44PerE9zEEFrChyUEZFQyTSv+vJHwYZRkEcxDsfVEIBF
CG55IONIggPIpixybSeRGk3Cqzs+rshBHF33hqQ+Mu0hIvaZ67j0uy74s2uATqfK
ev3cP48PLumZ+Aix2Mu7hXIGXUY9M3NXSaGf8C9ykJyr4WlMEq7KS4VH0/Kw1/TB
qZeSVrzE8LEdom9XadkMgqoTLNRiOqbU/LWEDgIixv85iAMmlX7E54pqp8dOkuYa
R/5ld/LpZSw6WcR6vBW0WMuFSXGM7W1SUcwzn25tka/sl0GC2hGmSlOZEdKck23m
0IFfw9RLteGKZlXwIHZTVHnVyX7m7SCVmYzMw9HNobJh/mCqNlZu507IxUBj5aGC
/eNhGcTYHOk5vJW46BlcmtThutQ5NZBCCs6iIOg8BdfpqQ1buos=
=LCdy
-END PGP SIGNATURE-



Accepted flatpak 0.8.7-2~deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-08-07 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 31 Jul 2017 08:44:53 +0100
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.7-2~deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak0 - Application deployment framework for desktop apps (library)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
Changes:
 flatpak (0.8.7-2~deb9u1) stretch; urgency=medium
 .
   * Rebuild for stretch
   * Merge changelog from stretch-security
   * debian/gbp.conf: Switch branch to debian/stretch
Checksums-Sha1: 
 d0854284899ddbe7e672c3c0661f6d88f5165961 3050 flatpak_0.8.7-2~deb9u1.dsc
 972e4c7c06b7a0b7fb64f696b266c6deaa2d82be 21256 
flatpak_0.8.7-2~deb9u1.debian.tar.xz
Checksums-Sha256: 
 a556448359256ad168d315440515bec81c676233d1810c754993b4466160e1de 3050 
flatpak_0.8.7-2~deb9u1.dsc
 0e798e52588f0b52edbb170af915e46c181bae2ccd48c9af70d41404364cce9a 21256 
flatpak_0.8.7-2~deb9u1.debian.tar.xz
Files: 
 5967030e8817258db0158834ea654a3c 3050 admin optional flatpak_0.8.7-2~deb9u1.dsc
 4dbc7353dffcd0b41c93d2c029c934aa 21256 admin optional 
flatpak_0.8.7-2~deb9u1.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=4a92
-END PGP SIGNATURE-



Accepted dbus 1.10.22-0+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-08-06 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 30 Jul 2017 11:23:02 +0100
Source: dbus
Binary: dbus dbus-1-dbg dbus-1-doc dbus-tests dbus-udeb dbus-user-session 
dbus-x11 libdbus-1-3 libdbus-1-3-udeb libdbus-1-dev
Architecture: source
Version: 1.10.22-0+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-tests - simple interprocess messaging system (test infrastructure)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-user-session - simple interprocess messaging system (systemd --user 
integration)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.10.22-0+deb9u1) stretch; urgency=medium
 .
   * New upstream stable release
 - d/copyright: Update
 - Drop Doxygen reproducibility patch, applied upstream
 - d/p/backports/Replace-DBUS_USE_TEST_BINARY-(etc.).patch:
   Update backported patch to apply to 1.10.22
   * debian/gbp.conf: Set git branch to debian/stretch
Checksums-Sha1: 
 448abca4d87792af2b8777a56ab9664838e963b6 3101 dbus_1.10.22-0+deb9u1.dsc
 9d4e93475fb95498cc105af68c88eb51f3062e6d 1989350 dbus_1.10.22.orig.tar.gz
 e93f8393a537a6d22230a6fea0fee31482f54adf 56372 
dbus_1.10.22-0+deb9u1.debian.tar.xz
Checksums-Sha256: 
 c6128b8750366aa6529ac3063fe83b18ec5d3b3f49ce8b1420c32ac3293c52e2 3101 
dbus_1.10.22-0+deb9u1.dsc
 e2b1401e3eedc7b5c9a2034d31254c886e1fcbc7858006e0a1c59158fe4b7b97 1989350 
dbus_1.10.22.orig.tar.gz
 da3a6af29e81a7ab37a7513bb9e2dac25fe00bd15cad239a15faa937da35c74d 56372 
dbus_1.10.22-0+deb9u1.debian.tar.xz
Files: 
 9f4d986452be3f23905d0576eeddf265 3101 admin optional dbus_1.10.22-0+deb9u1.dsc
 baaa10b7cb49086ad91179a8decfadc5 1989350 admin optional 
dbus_1.10.22.orig.tar.gz
 ef94f71f6ebf600683ed1d681b9afde1 56372 admin optional 
dbus_1.10.22-0+deb9u1.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=Hmwm
-END PGP SIGNATURE-



Accepted flatpak 0.8.5-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates

2017-06-24 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 21 Jun 2017 12:05:49 +0100
Source: flatpak
Binary: flatpak flatpak-builder flatpak-tests gir1.2-flatpak-1.0 libflatpak-dev 
libflatpak-doc libflatpak0
Architecture: source
Version: 0.8.5-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Closes: 865413
Description: 
 flatpak- Application deployment framework for desktop apps
 flatpak-builder - Flatpak application building helper
 flatpak-tests - Application deployment framework for desktop apps (tests)
 gir1.2-flatpak-1.0 - Application deployment framework for desktop apps 
(introspection)
 libflatpak0 - Application deployment framework for desktop apps (library)
 libflatpak-dev - Application deployment framework for desktop apps 
(development)
 libflatpak-doc - Application deployment framework for desktop apps 
(documentation)
Changes:
 flatpak (0.8.5-2+deb9u1) stretch-security; urgency=high
 .
   * d/p/Ensure-we-don-t-install-world-writable-dirs-or-setuid-fil.patch:
 Patch from upstream stable release 0.8.7.
 Prevent deploying files with inappropriate permissions
 (world-writable, setuid, etc.) (Closes: #865413)
   * d/p/dir-Ensure-.local-share-flatpak-is-0700.patch:
 Patch from upstream stable release 0.8.7.
 Make ~/.local/share/flatpak private to user to defend against app
 vendors that might have released files with inappropriate permissions
 in the past
Checksums-Sha1: 
 e846b80ef7681b3c07097543e4caedb8dc27d0c5 3050 flatpak_0.8.5-2+deb9u1.dsc
 89d0784b27123ec61e2efa36febfdbe2f2edb009 744808 flatpak_0.8.5.orig.tar.xz
 7534963a7c9b6bcb222c20e4dd978f65a63bd24b 19528 
flatpak_0.8.5-2+deb9u1.debian.tar.xz
Checksums-Sha256: 
 1d3ffc3be9fc2596816c00a81534b66d891959540dfa6bed8dfe7b69aa6bac74 3050 
flatpak_0.8.5-2+deb9u1.dsc
 fd31bc23e5b62a187fa9eaed937aadac2ab48911c338005b39ed889b2ebf95e5 744808 
flatpak_0.8.5.orig.tar.xz
 4033dc04ac1465fec19145e7814d98a64660184403ffa16b44465eac680ea604 19528 
flatpak_0.8.5-2+deb9u1.debian.tar.xz
Files: 
 acbf2aeac7e5c18ee1a741b7433d3e28 3050 admin optional flatpak_0.8.5-2+deb9u1.dsc
 d160b96fdee4be1f9b0ecf60641899f8 744808 admin optional 
flatpak_0.8.5.orig.tar.xz
 97a2460243a83ffc779718a904bcbaa0 19528 admin optional 
flatpak_0.8.5-2+deb9u1.debian.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAllKl/oACgkQTej/KmPH
zJC8vxAAjzDWa3as3hhmA7sLD3mQu0/j2/q2Jv85TM2NF6crpzYHYvfDG1Aat7xK
OYttxp5DfkcSfYM1zFI3PBwvPg/wrd9aHZC7IHKUSsfbXnqNnRrwoXns+7UheC6L
BWrGmH0e4vh9fOvPeGB9DeDtE2qZ/SNhbSFcG1SeailDgnSVhaumSIh/HiUAPwra
G4WybbByMXHj3FtWMdL551DHr0IWvDhDBZSkhf/WO/vY3sAFk+u/Ix7LA/KM+AM8
IZBtd2I8woT7a0B3qSBYXFp1KGkJsSLZvSb93fe70GBW/XqCCpZHl5xktyRvc3VL
wypDw4vuK1dXcnpfptgiIL/avEmecIHUYdd7C/OYlNDGuycarI3ozoEcuY1jwbW5
mGkTEEcLa4XuNgm6II61NfSEvfpgkPUxHz9X2P4LLIWODHJQw+iCUQdmxtT4oEMv
M9HqGLgBe6XZGdJu9LT9wawrdXGxT0/kLxgl/S2ehN0QIdJuwJgue+pzneqDrxId
DQMhCRvRbn2vZbT8s/pQW7OTGYgikn6DLyf9kRlwvDsM+NZIHOKHGYH6OuH1Crp4
LfnoIT4K0VTUb6dzoAlnikklmQkm/Xc0cg1Y1C1D6MTdSruDvRwvEn4y86vN0VAI
IJuQcqtWroq4Wv2mWPjAJOwh0YN4LfDJvwe2CrpB7W42MeC3adg=
=Lp3U
-END PGP SIGNATURE-



Accepted ioquake3 1.36+u20140802+gca9eebb-2+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates

2017-03-24 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 14 Mar 2017 22:29:41 +
Source: ioquake3
Binary: ioquake3 ioquake3-server ioquake3-dbg
Architecture: source amd64
Version: 1.36+u20140802+gca9eebb-2+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description:
 ioquake3   - Game engine for 3D first person shooter games
 ioquake3-dbg - debug symbols for the ioquake3 game engine
 ioquake3-server - Standalone server for ioQuake3 based games
Closes: 857699
Changes:
 ioquake3 (1.36+u20140802+gca9eebb-2+deb8u1) jessie-security; urgency=high
 .
   * d/gbp.conf: switch branch to debian/jessie
   * d/patches: Add patches from upstream fixing security vulnerabilities
  - refuse to load potentially auto-downloadable .pk3 files as
ioquake3 renderers, ioquake3 game code, libcurl, or OpenAL drivers
(mitigation: auto-downloading is off by default, and in Debian
we do not dlopen libcurl anyway)
  - refuse to load default configuration file names from a .pk3 file
  - protect cl_renderer, cl_curllib, s_aldriver configuration variables so
game code cannot set them
  - refuse to overwrite files other than *.txt with the dump console
command
  - refuse to overwrite files other than *.cfg with the writeconfig
console command
  (Closes: #857699; CVE-2017-6903)
Checksums-Sha1:
 bdd735c15c0f0dfb6cea1a4fc050cd59d90c8418 2487 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc
 4d6782c17e106c9a5f3c03872d6d8e75941e2008 1876668 
ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz
 2cbc3cda14617aaa86bfd7dbfae8ee03927cf8c3 19520 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz
 e4de5d55625b0c5dfbd4a61a49bf2ed8dc35450f 1465252 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 0664c2d59fcb025f98fb0723142d19f62e76533f 855718 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 f8b1ed5dd6b5a0beea5244de2f87e5662cf9cd79 5094952 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
Checksums-Sha256:
 308ca0fe3aa91e2c129db0d8f89e7830e7c9d1a3e77c25d8457240fef6eb0a90 2487 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc
 436e83a5754a4a7106d787aba58454f9cc0d99d6476e20e4bd448aa6a025987b 1876668 
ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz
 879e2e6951e1e221d9da2c1208ff332d3aa866a0dd707492f21d6d4b5cf1ce71 19520 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz
 c40adcbf4882370b7b08e571d5f28968987252bd3859678d0ebe272ccf3852e9 1465252 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 2ced31044609186b1f134303cf183e2781b86f761a5f0599fa577258c3340754 855718 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 bcf6cc1843b23a07c87a022e39f51ddbec497edd2411f8eae14e492fe5f5b2b9 5094952 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
Files:
 4dd04d5f454ee0e2097d9baadbbdd946 2487 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.dsc
 c2c32361212294bc8a6f032f97e06832 1876668 games optional 
ioquake3_1.36+u20140802+gca9eebb.orig.tar.xz
 2f92dc6560e66b9ffbc2f63f4a050ce8 19520 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1.debian.tar.xz
 4fb5f8dadafb1e2819a82bb33d97f3ba 1465252 games optional 
ioquake3_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 07866243a3e599f500f70dd60e7faab3 855718 games optional 
ioquake3-server_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb
 0ef15e7a82dce3d3255282c5ea1a31bb 5094952 debug extra 
ioquake3-dbg_1.36+u20140802+gca9eebb-2+deb8u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=QpKT
-END PGP SIGNATURE-



Accepted ikiwiki 3.20141016.4 (all source) into proposed-updates->stable-new, proposed-updates

2017-01-15 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 11 Jan 2017 18:18:52 +
Source: ikiwiki
Binary: ikiwiki
Architecture: all source
Version: 3.20141016.4
Distribution: jessie-security
Urgency: high
Maintainer: Simon McVittie 
Changed-By: Simon McVittie 
Closes: 835612
Description: 
 ikiwiki- a wiki compiler
Changes:
 ikiwiki (3.20141016.4) jessie-security; urgency=high
 .
   * Reference CVE-2016-4561 in 3.20141016.3 changelog
   * Security: force CGI::FormBuilder->field to scalar context where
 necessary, avoiding unintended function argument injection
 analogous to CVE-2014-1572.
 - passwordauth: prevent authentication bypass via multiple name
   parameters (CVE-2017-0356, OVE-20170111-0001)
 - passwordauth: prevent userinfo forgery via repeated email
   parameter (also CVE-2017-0356)
 - comments, editpage: prevent commit metadata forgery
   (CVE-2016-9646, OVE-20161226-0001)
 - CGI, attachment, comments, editpage, notifyemail, passwordauth,
   po, rename: harden against similar issues that are not believed
   to be exploitable
   * t/passwordauth.t: new automated test for CVE-2017-0356
   * Backport IkiWiki::Plugin::git from 3.20170110 to fix the following
 bugs, including one minor security vulnerability:
 - Security: try revert operations before approving them. Previously,
   automatic rename detection could result in a revert writing outside
   the wiki srcdir or altering a file that the reverting user should not
   be able to alter, an authorization bypass.
   (CVE-2016-10026 represents the original vulnerability.)
   The incomplete fix released in 3.20161219 was not effective for git
   versions prior to 2.8.0rc0.
   (CVE-2016-9645 represents that incomplete solution. Debian stable
   was never vulnerable to this one.)
 - Fix the warnings "cannot chdir to .../ikiwiki-temp-working: No such
   file or directory" seen in the initial fixes for those security issues
 - If no committer identity is known, set it to
   "IkiWiki " in .git/config. This resolves commit errors
   in versions of git that require a non-trivial committer identity.
 - Use git log --no-renames to generate recentchanges, fixing the git
   test-case with git 2.9 (Closes: #835612)
 - Don't issue a warning if the rcsinfo CGI parameter is undefined
 - Do not fail to commit changes with a recent git version
   and an anonymous committer
 - Do not fail on filenames starting with a dash
   (patch from Florian Wagner)
 - Don't add a redundant "--" and run "git rev-list ... -- -- ..."
   * Backport t/git-cgi.t from 3.20170110 to have automated test coverage
 for using the CGI with git, including tests for CVE-2016-10026
  - Build-depend on libipc-run-perl for better build-time test coverage
   * Backport IkiWiki::Plugin::img from 3.20160905 to fix a regression
 in 3.20141016.3:
 - img: ignore the case of the extension when detecting image format,
   fixing the regression that *.JPG etc. would not be displayed
   (patch from Amitai Schleier)
   * Backport tests' installed-test (autopkgtest) support from 3.20160121,
 adjusted for compatibility with the older pkg-perl-autopkgtest in jessie
 - d/control: add enough build-dependencies to run all tests, except for
   non-git VCSs
Checksums-Sha1: 
 33858105736a8a9b4a5068bcc210eb32680a1e2b 2117 ikiwiki_3.20141016.4.dsc
 33056d7e4cc66858dc16dd33deeded101c3d78db 3355017 ikiwiki_3.20141016.4.tar.gz
 833f2c380e6192f4b66292f18d04fc0cbf481380 1431210 ikiwiki_3.20141016.4_all.deb
Checksums-Sha256: 
 c000c05af1fb5359fcf4be03cdb8ff3598f8e99648acabc73e06399058fa7cfc 2117 
ikiwiki_3.20141016.4.dsc
 ab571d99f1897492b86bfb42ee625d4d9bf77d1f1024afe833a75499b4ea8609 3355017 
ikiwiki_3.20141016.4.tar.gz
 b774615740192adb9cf0f645a80c428d28634c34e671ff3e2e8d6f659e53b945 1431210 
ikiwiki_3.20141016.4_all.deb
Files: 
 d9a185f7ee6786538b1ea39f2576dc28 2117 web optional ikiwiki_3.20141016.4.dsc
 3ad760018731e99aef77e2456462e9fb 3355017 web optional 
ikiwiki_3.20141016.4.tar.gz
 a00680d717ca319e0edf8f99b34e9aa2 1431210 web optional 
ikiwiki_3.20141016.4_all.deb

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEE2pjyXAhxxJpZ6v8sTej/KmPHzJAFAlh2meIACgkQTej/KmPH
zJCLGQ//fH3n1lmWKsdt+ri1wj2lA9pPBA8DPDpMVL+WnbAekhTztfy0xY0W/HGY
Zyiq6PSLxKMO8j2vP+wug3XTjo+iNb1ycJMaSwwpxKNZVh3nLqk+5sHDau2HfoHB
LrglOKZTx9k65hOj/6Rb+/onXqQSFK0JCi6Un/oibZD9b0C8a/670MQ2CuDeS1UD
z7JAurOWfrtpK5Rg1wMxUsaz1NRaxNF+WjxZVsAszugozCoNs0NBQ8q3gWSOe+V/
oRkbeT7DsAEn0YNf449OR2vwt0HiVaG5c8E8zl5vmPk68qBoEKCWoBj67eb134mT
k1tSce4DqcK7xme1Km08HF3c4S9GyJu1mdCJUdzQx8txv1PseToUR8AF6Djb25C3
fBrCX84zd6+V1HbPGoFfyPOs/GnPOKOoOohmRAecRsN3bt0Wn1Z+3/rcs6K6A3qy
6lkFw0oAyWEwV/in08jQvwCJ1aJdT+RAo1OVIwtPZK/dY6hZzT3/Cq3OYPrxTL+e
D74fj3ItNrMok1/wx1SzxUfYk/DgJ+iEPXKp5svNw6QB9JB1mi25ux3pgVazXy+H
DgLQW

Accepted dbus 1.8.22-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates

2016-11-21 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 10 Oct 2016 11:42:50 +0100
Source: dbus
Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc 
libdbus-1-dev dbus-1-dbg
Architecture: all source
Version: 1.8.22-0+deb8u1
Distribution: jessie
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Closes: 813970
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.8.22-0+deb8u1) jessie; urgency=medium
 .
   * New upstream bugfix release
 - fix a potential format string vulnerability, which is not believed
   to be exploitable in practice
   * dbus.prerm: ensure that dbus.socket is stopped before removal,
 so that a new connection to the bus won't cause dbus.service to be
 restarted (Closes: #813970)
Checksums-Sha1: 
 e515376ad0bcba52ebd0d34812558c7ef78fb9a1 2889 dbus_1.8.22-0+deb8u1.dsc
 6e71490083037ce2d78067eb8856cfcca3be5d1f 1894768 dbus_1.8.22.orig.tar.gz
 346ed566f48feb5c8910cf622ac8731bb30f26ac 38168 
dbus_1.8.22-0+deb8u1.debian.tar.xz
 a4cb535664dbbb66a3d918f3a3ed019a0d289453 1324650 
dbus-1-doc_1.8.22-0+deb8u1_all.deb
Checksums-Sha256: 
 13cf18c13043baccf6fb26d18ea4e0fcb4b6859942175b3b735a1f63608c75c1 2889 
dbus_1.8.22-0+deb8u1.dsc
 19a52e5a42b2a2faf15a54745a098bb8cf55a76598fa4a0b8b6d886adcbe1d53 1894768 
dbus_1.8.22.orig.tar.gz
 9c702fd70d8b451351bf8566dae78ef57e129d7cad9fcde000923575131fda5c 38168 
dbus_1.8.22-0+deb8u1.debian.tar.xz
 ca7b1594fa23f929b1a6f408c7f4cf7bcda8d19d79c5550bb5918501ce58f317 1324650 
dbus-1-doc_1.8.22-0+deb8u1_all.deb
Files: 
 e712378604c0906a869ed2958ada542d 2889 admin optional dbus_1.8.22-0+deb8u1.dsc
 657332bfe49ef15ef4fe0f0c8757e9ac 1894768 admin optional dbus_1.8.22.orig.tar.gz
 baa3ca29acf719fff6cbfc036fe3dcb6 38168 admin optional 
dbus_1.8.22-0+deb8u1.debian.tar.xz
 a98f7c96d0f0d56cf87c89818f7a8881 1324650 doc optional 
dbus-1-doc_1.8.22-0+deb8u1_all.deb

-BEGIN PGP SIGNATURE-
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=yxTM
-END PGP SIGNATURE-



Accepted ikiwiki 3.20141016.3 (all source) into proposed-updates->stable-new, proposed-updates

2016-05-18 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 06 May 2016 07:55:49 +0100
Source: ikiwiki
Binary: ikiwiki
Architecture: all source
Version: 3.20141016.3
Distribution: jessie-security
Urgency: high
Maintainer: Simon McVittie 
Changed-By: Simon McVittie 
Description: 
 ikiwiki- a wiki compiler
Changes:
 ikiwiki (3.20141016.3) jessie-security; urgency=high
 .
   [ Simon McVittie ]
   * img: stop ImageMagick trying to be clever if filenames contain a colon,
 avoiding mis-processing
   * HTML-escape error messages, in one case avoiding potential cross-site
 scripting (OVE-20160505-0012)
   * Mitigate ImageMagick vulnerabilities such as CVE-2016-3714:
 - img: force common Web formats to be interpreted according to extension,
   so that "allowed_attachments: '*.jpg'" does what one might expect
 - img: restrict to JPEG, PNG and GIF images by default, again mitigating
   CVE-2016-3714 and similar vulnerabilities
 - img: check that the magic number matches what we would expect from
   the extension before giving common formats to ImageMagick
 .
   [ Joey Hess ]
   * img: Add back support for SVG images, bypassing ImageMagick and
 simply passing the SVG through to the browser, which is supported by all
 commonly used browsers these days.
 SVG scaling by img directives has subtly changed; where before
 size=wxh would preserve aspect ratio, this cannot be done when passing
 them through and so specifying both a width and height can change
 the SVG's aspect ratio.
Checksums-Sha1: 
 65def5ad90f38d3934e982d3b9b7e8f7c27bfdae 1899 ikiwiki_3.20141016.3.dsc
 a0d1ba4e17e491a113089e4dc74c0f59cb5ce4e2 3268755 ikiwiki_3.20141016.3.tar.gz
 669bdc6ca47712113dbc34a9bf4ec2db06f41744 1428292 ikiwiki_3.20141016.3_all.deb
Checksums-Sha256: 
 5648aaa9bfa1c5835073cb8baeed449a75850ffba6ba0bfb857e3afd16793900 1899 
ikiwiki_3.20141016.3.dsc
 bb9e9618a7e04b229a3d329ef66343381cd7cb77df603b4ff595313c2414581a 3268755 
ikiwiki_3.20141016.3.tar.gz
 77b122ca9679f4573fc5fc077dad59a021bc1478fe3b5f5b6bd5d72512fd66fe 1428292 
ikiwiki_3.20141016.3_all.deb
Files: 
 44630cdc7ce71506d88b2f9445291bc9 1899 web optional ikiwiki_3.20141016.3.dsc
 352f16da52a29fdf749bd80bad7c913f 3268755 web optional 
ikiwiki_3.20141016.3.tar.gz
 44fe4deb17ff3e0c7d6fb75ac7724bba 1428292 web optional 
ikiwiki_3.20141016.3_all.deb

-BEGIN PGP SIGNATURE-
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=9Sj4
-END PGP SIGNATURE-



Accepted dbus 1.8.20-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates

2015-08-02 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 21 Jul 2015 17:59:42 +0100
Source: dbus
Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc 
libdbus-1-dev dbus-1-dbg
Architecture: all source
Version: 1.8.20-0+deb8u1
Distribution: jessie
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.8.20-0+deb8u1) jessie; urgency=medium
 .
   * New upstream bugfix release
 - fix a memory leak when GetConnectionCredentials is called
 - stop dbus-monitor replying to org.freedesktop.DBus.Peer
   messages, including those that another process should have
   replied to
Checksums-Sha1: 
 c5458551edaf5c1c004ab8aebbd797508418f0f3 1323916 
dbus-1-doc_1.8.20-0+deb8u1_all.deb
 5c1e4d3668b96a585ba18f73d034797f1bd04296 2813 dbus_1.8.20-0+deb8u1.dsc
 906fde49b70306dfcd4ecc6cad7b32cc85924ed5 1871722 dbus_1.8.20.orig.tar.gz
 dc0e87083fe92dcec3c61635b6fcf98ef65f66e9 37932 
dbus_1.8.20-0+deb8u1.debian.tar.xz
Checksums-Sha256: 
 ca2a1be370c7ccc3d9de823050aa602dc6d06a7b13b325e3147383dc5f7a1405 1323916 
dbus-1-doc_1.8.20-0+deb8u1_all.deb
 f95445cb25efe8ccbe4c504727f8154aa4b422676fc6ab7a177f6a4d82a318c3 2813 
dbus_1.8.20-0+deb8u1.dsc
 5c4fbf4c64621c96e871da91d2b729a5b00536e116d3c4612a469d924b1b703a 1871722 
dbus_1.8.20.orig.tar.gz
 4b8c0a6f302d6f9e3b7f8eee8e3930023c2f247709417034de79307fc6a8740a 37932 
dbus_1.8.20-0+deb8u1.debian.tar.xz
Files: 
 2f4b79c6d18897420b55d93427b2ae07 1323916 doc optional 
dbus-1-doc_1.8.20-0+deb8u1_all.deb
 8abf8c5d2915fbc39b1172e25ab05d5f 2813 admin optional dbus_1.8.20-0+deb8u1.dsc
 b49890bbabedab3a1c3f4f73c7ff8b2b 1871722 admin optional dbus_1.8.20.orig.tar.gz
 772aec0614ec711ed1f6668a10e9f766 37932 admin optional 
dbus_1.8.20-0+deb8u1.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=o4CG
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1zlxm0-0003uj...@franck.debian.org



Accepted dbus 1.8.18-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates

2015-05-27 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 14 May 2015 13:52:50 +0100
Source: dbus
Binary: dbus dbus-udeb dbus-x11 libdbus-1-3 libdbus-1-3-udeb dbus-1-doc 
libdbus-1-dev dbus-1-dbg
Architecture: all source
Version: 1.8.18-0+deb8u1
Distribution: jessie
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-udeb  - simple interprocess messaging system (minimal runtime) (udeb)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-3-udeb - simple interprocess messaging system (minimal library) 
(udeb)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.8.18-0+deb8u1) jessie; urgency=medium
 .
   * New upstream bugfix release
 - Hardening: lock down the session bus to only allow EXTERNAL auth by
   default, the same as the system bus. This avoids allowing
   DBUS_COOKIE_SHA1, which can end up using a predictable random source
   on systems where /dev/urandom is unavailable or dbus-daemon runs out
   of memory. See the upstream NEWS for more details.
Checksums-Sha1: 
 d50e13938e7af04cffc0dd4c636099ad24af0309 2813 dbus_1.8.18-0+deb8u1.dsc
 a30be4a6efe3fe570d2a2cc4265f0ef9be9367aa 1868625 dbus_1.8.18.orig.tar.gz
 32efed16319aed22afdca957eb60ab84e99e894f 37840 
dbus_1.8.18-0+deb8u1.debian.tar.xz
 4b303d0a8fc247287aa926eb8f9f5364a862aea1 1324518 
dbus-1-doc_1.8.18-0+deb8u1_all.deb
Checksums-Sha256: 
 8970ff1ec50f729f6071ad222c7fb035b2f8ce6a2e3477acdceed36aec9844d6 2813 
dbus_1.8.18-0+deb8u1.dsc
 36f2eb9c777a3c71562573da36a147e900a642afcd44d2b0470d992a4898c4f2 1868625 
dbus_1.8.18.orig.tar.gz
 e985fe782137e4808d79349403f973b1dc1ab5c9b0cd9198625f2c753dac43b5 37840 
dbus_1.8.18-0+deb8u1.debian.tar.xz
 b146c03f28303949921ff57bdbd8a465704471abf9584f458c688f7385a40319 1324518 
dbus-1-doc_1.8.18-0+deb8u1_all.deb
Files: 
 e15bda7b6c8152c719e130c6fe06aa47 2813 admin optional dbus_1.8.18-0+deb8u1.dsc
 83e607e9ccb1c921d5b6bbea2376a36c 1868625 admin optional dbus_1.8.18.orig.tar.gz
 c48c6e7ac2ad727225cf8b92d75cf060 37840 admin optional 
dbus_1.8.18-0+deb8u1.debian.tar.xz
 fa2c126899d26e0661ce10f5a4348759 1324518 doc optional 
dbus-1-doc_1.8.18-0+deb8u1_all.deb

-BEGIN PGP SIGNATURE-

iQIVAwUBVWVol03o/ypjx8yQAQjQYQ//ZXeUVH5B19UjPbndBsChvyqr0+FyXWul
5vmeatd6IeA9xh8fXwRNwzMATqCc1biLKLtQG7jWsymz7HZew5drjW3xLNP4QJ34
b9dZO3Tgn/c30m4TN0HehwUVQ7LCutS7lAq0+4U2Z6zShFivo+102JQ4SCdq3FK0
IyXvNc7ow+PBKHmGgYGWfLBIozBUXB9w9kPSlXnDSdfBFHUVqOoq83ayIMZDunbm
k+H3OqcL1wQf8v1CpXkqrq+ZzhHMqWJQ9+5cRFOshTftw6ZjKmVR3l1DXPGwTsq3
IMTzShchuIOtxuICxv4M9YuSYibp39AZ8D6BT5OaW/07/joTmUlrbIM1lZcK0/25
z4s/ub/myqSTrhKe2PhUUtSWsv/YNH7DLXnAwXjh1DUGQwKnqt4msj6d3j8SptkJ
sKLu7LHNHmMhfl1z7unGlxFLHiHHBrAbrBunLF271atVRS3JkDm2v5enlWzjhlZY
QP2m6uDgHREnfJGj65sDUXXLJBA9qdUc/KmMCW9ktYnfbNpi8yeiJYvZCty3N4C6
oYXfJrV9XhcDOMz7yBAXxgw90qU6CcQuljHPLHdx4FJQmo5Cz8XEbIWIjfx8hZIU
iKAQUQGOxbpVXD+3W+Dsf2YsFgQcEw3jUQwIgDkFWOrdvsB/1tAC9fdf27TMoQ/7
yMEttaP5eqQ=
=Ck8N
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1yxfbv-0001us...@franck.debian.org



Accepted ikiwiki 3.20120629.2 (all source) into proposed-updates->stable-new, proposed-updates

2015-04-07 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 06 Apr 2015 20:34:51 +0100
Source: ikiwiki
Binary: ikiwiki
Architecture: all source
Version: 3.20120629.2
Distribution: wheezy
Urgency: medium
Maintainer: Simon McVittie 
Changed-By: Simon McVittie 
Closes: 781483
Description: 
 ikiwiki- a wiki compiler
Changes:
 ikiwiki (3.20120629.2) wheezy; urgency=medium
 .
   [ Joey Hess ]
   * Fix XSS in openid selector. Thanks, Raghav Bisht. (Closes: #781483;
 CVE-2015-2793)
Checksums-Sha1: 
 00cc739fe41b410820e45c864dfdcba074852d31 1794 ikiwiki_3.20120629.2.dsc
 9c2c6406b4f9b60475e7f950598d2be97349e627 2777104 ikiwiki_3.20120629.2.tar.gz
 e57ec19e21371c0a6f75cbde0821b2af866f6949 1802842 ikiwiki_3.20120629.2_all.deb
Checksums-Sha256: 
 a060f97be1455c005547d413534be48eb68e99f3f5dce9c8f8460840ea2c2e57 1794 
ikiwiki_3.20120629.2.dsc
 3d7261de05da5787731e2147ce53fbd2bc98b4e3138f62b3cf13d680079c689d 2777104 
ikiwiki_3.20120629.2.tar.gz
 f42d2dcccd4882f8a85bc474e8183da7e810c2ec5c2871836eb439da510c1bea 1802842 
ikiwiki_3.20120629.2_all.deb
Files: 
 0a96ca1b26b5022dddaba0f9aa270b64 1794 web optional ikiwiki_3.20120629.2.dsc
 13a9475c1c185267a3df377786803bd3 2777104 web optional 
ikiwiki_3.20120629.2.tar.gz
 e2c3158191f36f485e7d78198041ff5b 1802842 web optional 
ikiwiki_3.20120629.2_all.deb

-BEGIN PGP SIGNATURE-
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=GSip
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1yfzsj-g7...@franck.debian.org



Accepted dbus 1.6.8-1+deb7u6 (all source) into proposed-updates->stable-new, proposed-updates

2015-02-12 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 05 Feb 2015 15:58:36 +
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: all source
Version: 1.6.8-1+deb7u6
Distribution: wheezy-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes: 
 dbus (1.6.8-1+deb7u6) wheezy-security; urgency=high
 .
   * Add patch for system.conf to fix a local denial of service when
 using systemd activation (CVE-2015-0245)
Checksums-Sha1: 
 4287afd675bd4d5025728be81d6afa5cd9a88d47 2293982 
dbus-1-doc_1.6.8-1+deb7u6_all.deb
 39d15fe156578e94fe4bc00c06f03ce7f9547902 2585 dbus_1.6.8-1+deb7u6.dsc
 bf3d58bcc8d21c12bb43a624da1aa63944e363ca 50124 
dbus_1.6.8-1+deb7u6.debian.tar.xz
Checksums-Sha256: 
 7ad951418127c4daaa9b9cc7bf1a1a7721a14b9aa2005fadfa700c662443e00b 2293982 
dbus-1-doc_1.6.8-1+deb7u6_all.deb
 5542196824588b18d81a1e6431e4ee0ded975404d344dd9548c7f9d4bb11aabe 2585 
dbus_1.6.8-1+deb7u6.dsc
 50fe614aa01f750af2c9848ed62dc22576c8203f8750b167fdb1698ce7a6eed9 50124 
dbus_1.6.8-1+deb7u6.debian.tar.xz
Files: 
 cd1e902d14319141061fc36d51e0931b 2293982 doc optional 
dbus-1-doc_1.6.8-1+deb7u6_all.deb
 9f4845762603d09abb0ce49f32368dc8 2585 admin optional dbus_1.6.8-1+deb7u6.dsc
 f222077e2ea9441f3f84f58868facf83 50124 admin optional 
dbus_1.6.8-1+deb7u6.debian.tar.xz

-BEGIN PGP SIGNATURE-
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=yxoS
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1ym9nj-0006aa...@franck.debian.org



Accepted ikiwiki 3.20120629.1 (all source) into proposed-updates->stable-new, proposed-updates

2015-01-17 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sat, 17 Jan 2015 11:53:33 +
Source: ikiwiki
Binary: ikiwiki
Architecture: all source
Version: 3.20120629.1
Distribution: wheezy
Urgency: medium
Maintainer: Simon McVittie 
Changed-By: Simon McVittie 
Closes: 774441
Description: 
 ikiwiki- a wiki compiler
Changes:
 ikiwiki (3.20120629.1) wheezy; urgency=medium
 .
   Backport blogspam plugin from experimental, because the version in
   wheezy is no longer usable:
 .
   [ Joey Hess ]
   * Set Debian package maintainer to Simon McVittie as I'm retiring from
 Debian.
 .
   [ Amitai Schlair ]
   * blogspam: use the 2.0 JSON API (the 1.0 XML-RPC API has been EOL'd).
 Closes: #774441
Checksums-Sha1: 
 d7201c09a38019e6434f0202ed95a28550312230 1794 ikiwiki_3.20120629.1.dsc
 5b446f538a85608d84198c7b549188c64a7d849d 2776303 ikiwiki_3.20120629.1.tar.gz
 6444feb5886cecd90e681761a5ab106eb1ba85b8 1812852 ikiwiki_3.20120629.1_all.deb
Checksums-Sha256: 
 f1556f3896caeef3937481216094be384dba17f89c93817b2d0c8ca4d9b1adcd 1794 
ikiwiki_3.20120629.1.dsc
 ad078dcd39af175ac911cbaf1dd00995cd3f4039cceeec3652489d048346568b 2776303 
ikiwiki_3.20120629.1.tar.gz
 8c4f8faef9a0c228efe3ed2cb59a5459416f1a32d38d2f5af6da3e6664b4467d 1812852 
ikiwiki_3.20120629.1_all.deb
Files: 
 8611c003c89fcc87a3c688ee7c6c905e 1794 web optional ikiwiki_3.20120629.1.dsc
 c9c8c6d5f4332814c6bc373a29d2bdef 2776303 web optional 
ikiwiki_3.20120629.1.tar.gz
 ab61ad698359c845a0bddb7735d44a65 1812852 web optional 
ikiwiki_3.20120629.1_all.deb

-BEGIN PGP SIGNATURE-
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=PHjP
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1ycvp7-xu...@franck.debian.org



Accepted dbus 1.6.8-1+deb7u5 (all source) into proposed-updates->stable-new, proposed-updates

2014-12-12 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 24 Nov 2014 13:49:52 +
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: all source
Version: 1.6.8-1+deb7u5
Distribution: wheezy-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Closes: 769069
Description: 
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes:
 dbus (1.6.8-1+deb7u5) wheezy-security; urgency=high
 .
   * Fix CVE-2014-7824:
 - Start 'dbus-daemon --system' as root under sysvinit (it already
   starts as root under systemd), so it can increase its file
   descriptor limit
 - Add patch from upstream to increase dbus-daemon's file descriptor
   limit to 65536, completing the incomplete fix for CVE-2014-3636
   * Fix regression introduced in 1.6.8-1+deb7u4 (Closes: #769069):
 - Add patch from upstream to restore auth_timeout to its previous value,
   since the shorter value causes boot failures on some systems
 - Add README.Debian to dbus package, documenting how sysadmins with
   hostile local users, and systems where boot succeeds with the shorter
   value, can get the shorter value back
Checksums-Sha1: 
 ddd17c791742e66fb01eb6f8f1157d758a4bf65f 2585 dbus_1.6.8-1+deb7u5.dsc
 f2c4ea3c8b8d48504df92439f3a73e130c6dfb7a 49624 
dbus_1.6.8-1+deb7u5.debian.tar.xz
 11af121c453fd729c2274fb9511a07b3d5c30480 2293984 
dbus-1-doc_1.6.8-1+deb7u5_all.deb
Checksums-Sha256: 
 774f9812dfb9d288c4afbd89555743f8ba8ebdd8ec66c53b30bdcfd0c0bc70c5 2585 
dbus_1.6.8-1+deb7u5.dsc
 884e1811c8ee978f788904f788dd7ad22398e1a41334d69b7ffa46423d3d816f 49624 
dbus_1.6.8-1+deb7u5.debian.tar.xz
 dff00029bdb7021c89fa52526016979f4388dc76ecea771637786ccc04298c86 2293984 
dbus-1-doc_1.6.8-1+deb7u5_all.deb
Files: 
 82d13a3b39c4925814bf18b564a5879f 2585 admin optional dbus_1.6.8-1+deb7u5.dsc
 c2b5cdf453071fea1eedff1657c28d84 49624 admin optional 
dbus_1.6.8-1+deb7u5.debian.tar.xz
 58ae23dd5b0d0d44ec0913bf72c677cc 2293984 doc optional 
dbus-1-doc_1.6.8-1+deb7u5_all.deb

-BEGIN PGP SIGNATURE-
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=EtO7
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1xzmap-0007sj...@franck.debian.org



Accepted dbus 1.6.8-1+deb7u4 (source amd64 all) into proposed-updates->stable-new, proposed-updates

2014-09-20 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 15 Sep 2014 19:48:51 +0100
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source amd64 all
Version: 1.6.8-1+deb7u4
Distribution: wheezy-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes: 
 dbus (1.6.8-1+deb7u4) wheezy-security; urgency=high
 .
   * Fix several security issues
 - CVE-2014-3635: do not accept an extra fd in cmsg padding,
   avoiding a buffer overrun in dbus-daemon or system services
 - CVE-2014-3636: reduce maximum number of file descriptors
per message from 1024 to 16, to avoid two separate denial-of-service
attacks that could cause system services to be dropped from the bus
 - CVE-2014-3637: time out connections that have a
partially-sent message containing a file descriptor, so that
malicious processes cannot use self-referential file descriptors
to make a connection that will never close
 - CVE-2014-3638: reduce maximum number of pending replies
   per connection to avoid algorithmic complexity DoS
 - CVE-2014-3639: reduce timeout for authentication and
   do not accept() new connections when all unauthenticated connection
   slots are in use, so that malicious processes cannot prevent new
   connections to the system bus
Checksums-Sha1: 
 edfb1e042e124db574c0aae5fb2963fdea2936e6 2535 dbus_1.6.8-1+deb7u4.dsc
 608b0fcc08fc99f3274636e093d702dfd838c8a4 52078 
dbus_1.6.8-1+deb7u4.debian.tar.gz
 aff5819cd99c0bb0ae4277c3ea9df28e6e7108e2 400028 dbus_1.6.8-1+deb7u4_amd64.deb
 bd7321d3436b95eaf1d97d92b6a3669434ed7ab3 59350 
dbus-x11_1.6.8-1+deb7u4_amd64.deb
 f26f2d24ef3ff101cae23920411c4981fc0e2ee6 172600 
libdbus-1-3_1.6.8-1+deb7u4_amd64.deb
 299b93d6614895f83988991e8528b15bbef0b91e 2292644 
dbus-1-doc_1.6.8-1+deb7u4_all.deb
 17a8b931c3e18049788c4363494c755ac46d4d00 247302 
libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb
 cadc372b79426958347917ab73ac5b37f4116112 8301164 
dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb
Checksums-Sha256: 
 d6530499a91c420ffcd371c311baba464ffbcf15a589a20869b27308a0f8a456 2535 
dbus_1.6.8-1+deb7u4.dsc
 d5af1015a5876b863276829f1cfd0a0b419a49011748e265ad2dab0b3b02be89 52078 
dbus_1.6.8-1+deb7u4.debian.tar.gz
 894bf3308448e7ae8b713f23ca973710f70b7cea6e046b666739acfd6d29181f 400028 
dbus_1.6.8-1+deb7u4_amd64.deb
 196bb9d2e3b47da043c81c13f7ace8732493873b919e921e625efa358aec9f4f 59350 
dbus-x11_1.6.8-1+deb7u4_amd64.deb
 5d956bf89dec4c11be4f7dc844fa82fa9456f35b510a0ac6fd8b16af51c2aea7 172600 
libdbus-1-3_1.6.8-1+deb7u4_amd64.deb
 af721f08a55300db64af57a1a7dea4b22fef8c3839a5352fd64b4f14484c6e32 2292644 
dbus-1-doc_1.6.8-1+deb7u4_all.deb
 05cbefca3f2085d96355aff1517d6bc9a794b82ef64f4348b73976d8f8c68aad 247302 
libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb
 0f2f7d12da1677c2e96c187bc45346b19d8cacac0f5c938d0c878b4aa635d56e 8301164 
dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb
Files: 
 55c66ea492381d8038515dff9e51c2f1 2535 admin optional dbus_1.6.8-1+deb7u4.dsc
 37f4d8804b7f7298d1a83ac68ad06e53 52078 admin optional 
dbus_1.6.8-1+deb7u4.debian.tar.gz
 aa78f6477b8a8e7ebc03e70eedc32c42 400028 admin optional 
dbus_1.6.8-1+deb7u4_amd64.deb
 620e596398e9bdae931137c820e14f5e 59350 x11 optional 
dbus-x11_1.6.8-1+deb7u4_amd64.deb
 7f0631acca3501f64b7ad3ea22b8e1e7 172600 libs optional 
libdbus-1-3_1.6.8-1+deb7u4_amd64.deb
 16646197a3c1873bae9b7bdb8b8f 2292644 doc optional 
dbus-1-doc_1.6.8-1+deb7u4_all.deb
 a9700db097147bec46bf1170304cc22b 247302 libdevel optional 
libdbus-1-dev_1.6.8-1+deb7u4_amd64.deb
 b017f1bb94e6743f26515a56200b7d7d 8301164 debug extra 
dbus-1-dbg_1.6.8-1+deb7u4_amd64.deb

-BEGIN PGP SIGNATURE-

iQIVAwUBVBc4VE3o/ypjx8yQAQiQDw//bPClbDtRsMy30JZSGVPyjjHyjVf5ZzKw
iCM+/zeYBDwDNuIsKBoBdZzM/VDqbx5glUo8d0GkFm/C8ag3iyyi0FacxBYiYHo1
oOjjIfOifIB38G07JVNiyS9Ez9yuvqviEyr2briWA2BE3EvNZknR4OYdGowitKDQ
ZoZcwjy0OZt3ot2B5YZW5dCVeDIUIi5aT2NVlrRim4Cop9tmCh++hRukyn/AMcbp
uBvwtpmacSggMoOYqT/9n7HvRe4fLJsZC/Zk1fi7P+btylvZP7riIpC0EUub4obL
R+c4EBVcE3XjeB8Lx/NMXpKug/g9bhhvND5/WKCUCH9MWENXIUM8STFCAnlKBkhV
yDoo+IDWfi8FFobVDs+FY1JHZ3IyN9vVnxtLOU+UWVnA/GiQKDNmcg/lDeRuFWxj
PQG290qf3OwyUnsjtPTDOQtfhZNDYSeBG8hIlHM0XEJ4XYNIhd/vsGS9m8d3BOWh
lfzRBbkXnE5gFY3n8lr9pGSWAlPLGS5JDhfSeqtF74eczd47cUFJm/tCfcutNtbb
dd7QcnYE0za+RU53Dn7K2zLPI0qgyQrr+saP61ukUi9JqoQ1PebBu7Da0XhGsfa6
wkwsyUEeDYZqkkYax6W2QkCP10U2TfC9LDw2n7R50ALv9cUU+/eNWOHTTPeZnViB
cwtCqoghYrY=
=Hcud
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of

Accepted dbus 1.6.8-1+deb7u3 (source amd64 all)

2014-07-04 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 30 Jun 2014 15:19:25 +0100
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source amd64 all
Version: 1.6.8-1+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes: 
 dbus (1.6.8-1+deb7u3) wheezy-security; urgency=high
 .
   * CVE-2014-3532, CVE-2014-3533: add patches to avoid two separate
 local denial of service attacks involving sending file descriptors
 to system services
Checksums-Sha1: 
 eae19db12443455fe04408ac0b9130a09cd09870 2535 dbus_1.6.8-1+deb7u3.dsc
 3385d6058f8be043c484d7c019a63cafd92a2a37 39434 
dbus_1.6.8-1+deb7u3.debian.tar.gz
 b5e8e233f8fadcf11fd92d6d461ce8212438e0f7 398872 dbus_1.6.8-1+deb7u3_amd64.deb
 09213315bbb247fd4ef0cd0d6f7fb9d8bd9d158f 58998 
dbus-x11_1.6.8-1+deb7u3_amd64.deb
 848fcaf11a232d6a0ebb6b6c6d02814dd0fb7414 172046 
libdbus-1-3_1.6.8-1+deb7u3_amd64.deb
 85e326e8d38a5b0dd05fe95855692a6e6aca6550 2287234 
dbus-1-doc_1.6.8-1+deb7u3_all.deb
 46110a9ece1aa71033e840be9163f955401c5e27 246442 
libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb
 8e45553348fa26596426451cc6b0004b38350cfd 8284268 
dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb
Checksums-Sha256: 
 ad879cfc34a7040ac3195cdf6e74059a61e1f79cb085257c61bc0586a6a3b08e 2535 
dbus_1.6.8-1+deb7u3.dsc
 b26f704c955e453ecdcb5c6be8233bf7c15817c87f6c5fb600a73cfeddb063b5 39434 
dbus_1.6.8-1+deb7u3.debian.tar.gz
 6de730e6ed44e09886ef33e5160c298d76fb4cf35de4e97b62842bf33eb92e1f 398872 
dbus_1.6.8-1+deb7u3_amd64.deb
 6b035d3492bdb8f78f2d3d5066e1e4c11d227763a8f3192b417bfccbaa8bbef4 58998 
dbus-x11_1.6.8-1+deb7u3_amd64.deb
 4bfccbb32e71e6d9e9e3932a5a6cc237100e94839327e7a956793f0d3caf3a6a 172046 
libdbus-1-3_1.6.8-1+deb7u3_amd64.deb
 dd877e7a85988990edb1cb77d1a9250d7b29cce2b60038481f30aba9803f0dcb 2287234 
dbus-1-doc_1.6.8-1+deb7u3_all.deb
 0615ff68218bcc89f3e4ee42624a55288bbe468ddde45cf1d327be1a1d15cc39 246442 
libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb
 eda53a76c0755718e4d9aaf90045282ec5b7f8e348659bc3665e74c938ce196d 8284268 
dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb
Files: 
 6a538a48859a06f4df247407b0d101b3 2535 admin optional dbus_1.6.8-1+deb7u3.dsc
 a57f1f5839d3eb82682c5a9bdd6d5d16 39434 admin optional 
dbus_1.6.8-1+deb7u3.debian.tar.gz
 00dcc71939f1061a7fd34175b69327d4 398872 admin optional 
dbus_1.6.8-1+deb7u3_amd64.deb
 5977d43bef972c321c8d98396b118574 58998 x11 optional 
dbus-x11_1.6.8-1+deb7u3_amd64.deb
 9cec0a9f08314cc6cdae22bdde8196e5 172046 libs optional 
libdbus-1-3_1.6.8-1+deb7u3_amd64.deb
 10267bb96f0982be29f8b6ab84a0be3c 2287234 doc optional 
dbus-1-doc_1.6.8-1+deb7u3_all.deb
 c815d45afa0d95513ccc07f32962419b 246442 libdevel optional 
libdbus-1-dev_1.6.8-1+deb7u3_amd64.deb
 c309a7147eae5a3713a5df3bc6bdb720 8284268 debug extra 
dbus-1-dbg_1.6.8-1+deb7u3_amd64.deb

-BEGIN PGP SIGNATURE-
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=qZi6
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1x2yir-0001ud...@franck.debian.org



Accepted dbus 1.6.8-1+deb7u2 (source amd64 all)

2014-06-12 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 06 Jun 2014 18:40:22 +0100
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source amd64 all
Version: 1.6.8-1+deb7u2
Distribution: wheezy
Urgency: medium
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus   - simple interprocess messaging system (daemon and utilities)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 libdbus-1-dev - simple interprocess messaging system (development headers)
Changes: 
 dbus (1.6.8-1+deb7u2) wheezy; urgency=medium
 .
   * CVE-2014-3477: add patch to avoid a denial of service (failure to obtain
 bus name) in newly-activated system services that not all users are
 allowed to access
Checksums-Sha1: 
 76c0d27e17a38810920ae75a8502e67be0c3ca9f 2535 dbus_1.6.8-1+deb7u2.dsc
 25b5da8701edfbe01dad12e5903f58cd913d08ce 37099 
dbus_1.6.8-1+deb7u2.debian.tar.gz
 98e53ec8a27166528e0e25a1962aedaed0ba89bc 398768 dbus_1.6.8-1+deb7u2_amd64.deb
 32ec4569038809cb39903ebac281b2f4b5bedc9e 58942 
dbus-x11_1.6.8-1+deb7u2_amd64.deb
 98770f3721432607d74c12fc1291e309e8cef59d 171962 
libdbus-1-3_1.6.8-1+deb7u2_amd64.deb
 5ed1ae94d1053fa8e37c48661ce741690aade331 2285690 
dbus-1-doc_1.6.8-1+deb7u2_all.deb
 72e1cf038b4e43c442696088e51b2610048c0458 246344 
libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb
 d664830228858732fd0deb985ace02d3653d071d 8280904 
dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb
Checksums-Sha256: 
 0930c4b86c08b131b574019da6bf133fc11c5bb0d3a648e31e062494f8814093 2535 
dbus_1.6.8-1+deb7u2.dsc
 9e4be554e4cab3736bf8e5107b4ce950316d53a6e4be3085552d1a4208392fc4 37099 
dbus_1.6.8-1+deb7u2.debian.tar.gz
 9ffe01b36447aeff8c1f4969a756fa5e85d3ff33126dd45f16df8f2419a8626c 398768 
dbus_1.6.8-1+deb7u2_amd64.deb
 708d57b0aa35457f63f75324079617bd9c44637c8f59a4a5b4ea44e1cdf73d34 58942 
dbus-x11_1.6.8-1+deb7u2_amd64.deb
 849e8e21b4dc21c731e9d9cbd6ee4c1cce3c30701bb2b98915c39c87a672f51d 171962 
libdbus-1-3_1.6.8-1+deb7u2_amd64.deb
 74dacae2dd28a5d8d2cb4ebebed8295a2ea9ccdb0eb8fce951152616223e87f7 2285690 
dbus-1-doc_1.6.8-1+deb7u2_all.deb
 73447d4dc3232ed64fb45db7f614c3f7bcf8fb559a65afaa95049cefe0918208 246344 
libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb
 bfa369a2658b1ebdc22127d47c62083a1eeeb0728219059f31ad054fc3f5cb9f 8280904 
dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb
Files: 
 4e528cb46912917727af681a971f4ac9 2535 admin optional dbus_1.6.8-1+deb7u2.dsc
 df997ad45656ca32dddfc24bd900a96c 37099 admin optional 
dbus_1.6.8-1+deb7u2.debian.tar.gz
 91fa6c470dba5755a92702ca90871d0a 398768 admin optional 
dbus_1.6.8-1+deb7u2_amd64.deb
 d39a48fbce14982ccc59cbfb60d0ef49 58942 x11 optional 
dbus-x11_1.6.8-1+deb7u2_amd64.deb
 77fcd7cd37172e5ccfdbb572682435d7 171962 libs optional 
libdbus-1-3_1.6.8-1+deb7u2_amd64.deb
 d751b107d6f7e37c67a7f408c9d391fb 2285690 doc optional 
dbus-1-doc_1.6.8-1+deb7u2_all.deb
 e69d7524d8e3397bf7466cc9273dad81 246344 libdevel optional 
libdbus-1-dev_1.6.8-1+deb7u2_amd64.deb
 c141697d71af378f5891f1180aba 8280904 debug extra 
dbus-1-dbg_1.6.8-1+deb7u2_amd64.deb

-BEGIN PGP SIGNATURE-

iQIVAwUBU5n3y03o/ypjx8yQAQhsiw/8CmoUd+3uADG9y5WCYofTfPx65OxDCkJL
1Y7jtAmXawuU9ITfabJP7TUecsrwMOB2XL1zNyWQUuRbbOLsqqDQCpxK8qfGhXPd
zmnfOxro/sMXWycz1zXjnsED00pPh4EnSbb5vhcWzGPsaQbFjBmIw8YwcGd7AquZ
szavZPiQ20SxgLPYH2/NXGOYD8KPaEgoQ9mkG/oD6ihxLI2Ya711m6vFautRjz25
p5wgcUIl4glS7UOaej6dxHqkvSNWJrBNj4aA7fi1EtEjB3EJeDgTwhQ16aeauID5
klA7QfmTygAQ5gqBrN5Vqy1trXJUECvDrWPGNJ347wlkfwUssoX38ZY/CyWuCExo
uhKqvQNGxFI+k9YKYaNTdmaZf7DCz1P5eClPGvSrsuhQRcUPrWBgsqIvUtu2KNOF
U6irT4G+DRpabO2fiV8Ii05zTmWsYMhCOB7vzjchuuj1by2mksvc52tzBnjsBka3
OxU4p7EUMhcNBnVRtLjvzBWvwbOf+vpRwrNEBtBZu8Hehz8Jn2VkAE8yXMtt+cp6
RQsxjdp04pfHP+MPcFbZGQmmGgNckenlMIedAWLZZ2c/orn9z8kfKFIvO9fwFoFq
ma0tCI3+KJaGmWZkY+KopCY/3kNxRlKzkryd2JIf2fAMXj9OOcx8YspAwSmR5hHl
S+2yohIeeCc=
=f+ji
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1wvd4o-m0...@franck.debian.org



Accepted mp3gain 1.5.2-r2-2+deb7u1 (source amd64)

2014-04-13 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 02 Apr 2014 09:06:57 +0100
Source: mp3gain
Binary: mp3gain
Architecture: source amd64
Version: 1.5.2-r2-2+deb7u1
Distribution: wheezy
Urgency: high
Maintainer: Fabrizio Regalli 
Changed-By: Simon McVittie 
Description: 
 mp3gain- Lossless mp3 normalizer with statistical analysis
Closes: 740268
Changes: 
 mp3gain (1.5.2-r2-2+deb7u1) wheezy; urgency=high
 .
   * Add various patches from Daniel Kobras' mpg123 packaging to fix
 buffer overflows in the embedded copy/fork of mpglib
 - CVE-2003-0577 (originally #201698 in mpg123)
 - CVE-2004-0805 (originally #270542 in mpg123)
 - CVE-2004-0991
 - CVE-2006-1655 (originally #361863 in mpg123)
 (Closes: #740268)
Checksums-Sha1: 
 4c8842c052b7dab2119ffc5a544c0f0c046a748d 1897 mp3gain_1.5.2-r2-2+deb7u1.dsc
 f58a5cf1e05e13998b22336db17d3dce941097e5 16606 
mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz
 ae27beba140e4970729e24518315b278b60a8eeb 74834 
mp3gain_1.5.2-r2-2+deb7u1_amd64.deb
Checksums-Sha256: 
 5be6134d232093453b7811a801587f099aa30d7b60a2b0b11bf45588a91e160f 1897 
mp3gain_1.5.2-r2-2+deb7u1.dsc
 dc9cfb38d3c0c59b08a1ae5ac7cce19aaee12d0e51e95fe46ae7c8455572a66a 16606 
mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz
 ee2db8322eb3b36b5b76f5da854ba862dc179d70b88c2ad54282736b40213021 74834 
mp3gain_1.5.2-r2-2+deb7u1_amd64.deb
Files: 
 9ea1b90f209dd40c0edf2001041ff57a 1897 sound optional 
mp3gain_1.5.2-r2-2+deb7u1.dsc
 09b51103224f68755b588636b64350f4 16606 sound optional 
mp3gain_1.5.2-r2-2+deb7u1.debian.tar.gz
 67146cb370935a355da4b238c2064331 74834 sound optional 
mp3gain_1.5.2-r2-2+deb7u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=p2en
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/e1wznna-0005v7...@franck.debian.org



Accepted telepathy-gabble 0.16.7-0+deb7u1 (source amd64)

2013-10-03 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 24 Sep 2013 11:20:13 +0100
Source: telepathy-gabble
Binary: telepathy-gabble telepathy-gabble-dbg
Architecture: source amd64
Version: 0.16.7-0+deb7u1
Distribution: wheezy
Urgency: low
Maintainer: Debian Telepathy maintainers 

Changed-By: Simon McVittie 
Description: 
 telepathy-gabble - Jabber/XMPP connection manager
 telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols)
Closes: 721883
Changes: 
 telepathy-gabble (0.16.7-0+deb7u1) wheezy; urgency=low
 .
   * debian/gbp.conf: switch to wheezy branch
   * New upstream stable release
 - drop patch for CVE-2013-1431, fixed upstream
 - work around Facebook server behaviour change so we don't consider its
   service discovery response to be spoofed (Closes: #721883)
 - fix potential FTBFS in highly-parallel builds
 - initialize libdbus for thread-safety, as a precaution against
   plugins which might use it in a thread (e.g. libproxy GIO extension)
Checksums-Sha1: 
 e44d7a5456a31194b021ba3dc3d0dcb20588acfd 2507 
telepathy-gabble_0.16.7-0+deb7u1.dsc
 17f8c0d6ee95f7a6489962c1473bbd4f18041cf0 2429292 
telepathy-gabble_0.16.7.orig.tar.gz
 55c904557acabc82755766649e819df96af7d4f1 13043 
telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz
 68c2d3826f634d77cb9400eba594c32a5447ec68 821016 
telepathy-gabble_0.16.7-0+deb7u1_amd64.deb
 ef28c50bd53f84881ac2999e66b52e970f33e8cc 2130458 
telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb
Checksums-Sha256: 
 3a3386f3e34e61da5bf0513771044764bf20682ea020d18c4ddf08e5caa6d9e4 2507 
telepathy-gabble_0.16.7-0+deb7u1.dsc
 78bda66e0cba42674728bf7efdae91ed576767ff5985a6a05bb9be195ce0c9bf 2429292 
telepathy-gabble_0.16.7.orig.tar.gz
 e1164c741691eca645c0875eaf7f809dd827721dc9748ef0b05ff58f541a682b 13043 
telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz
 109b0549baebb4cb0b35fab8a223c94a32fc598c65ee690e6aad12718dc5975e 821016 
telepathy-gabble_0.16.7-0+deb7u1_amd64.deb
 6354643f7bc31f62103f1bb6e4f1a6db709607a1b4a7cd480565e8c3f9f1a885 2130458 
telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb
Files: 
 2e2aad2c88e73fc1e07770a6b9cbe232 2507 net optional 
telepathy-gabble_0.16.7-0+deb7u1.dsc
 cde7a9cb17f3f0ba22953128da3c48ac 2429292 net optional 
telepathy-gabble_0.16.7.orig.tar.gz
 d0cce9324621d919a2737dcb8652a0cc 13043 net optional 
telepathy-gabble_0.16.7-0+deb7u1.debian.tar.gz
 36d3fb5665aefd2d005958a525ed170a 821016 net optional 
telepathy-gabble_0.16.7-0+deb7u1_amd64.deb
 91456f644bbffcac08e38f610af0136a 2130458 debug extra 
telepathy-gabble-dbg_0.16.7-0+deb7u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=+xdX
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1vrrrf-00061a...@franck.debian.org



Accepted telepathy-idle 0.1.11-2+deb7u1 (source amd64)

2013-06-20 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 16 Jun 2013 13:26:54 +0100
Source: telepathy-idle
Binary: telepathy-idle
Architecture: source amd64
Version: 0.1.11-2+deb7u1
Distribution: wheezy
Urgency: low
Maintainer: Debian Telepathy maintainers 

Changed-By: Simon McVittie 
Description: 
 telepathy-idle - IRC connection manager for Telepathy
Closes: 706094
Changes: 
 telepathy-idle (0.1.11-2+deb7u1) wheezy; urgency=low
 .
   * Validate TLS certificates (Closes: #706094)
   * debian/NEWS: suggest the telepathy-idle backport for users who
 need interactive TLS certificate validation
Checksums-Sha1: 
 6b6af4926e796a313d470efa8107ae3f1e8618af 2292 
telepathy-idle_0.1.11-2+deb7u1.dsc
 60c50f838ae6012f13ba53702b9498633bf0d41a 7261 
telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz
 05a79dbefc65757eb2b4d2d9a66dc67c5d7519f1 118216 
telepathy-idle_0.1.11-2+deb7u1_amd64.deb
Checksums-Sha256: 
 1e727c9ce6f1116e708f70b0d9d4b5a389951095b1a3a02f9e9b2da4c2499759 2292 
telepathy-idle_0.1.11-2+deb7u1.dsc
 9b5ccaca97af19425990c6909fb1512457ce42ea675926e674280d59ba11d8e8 7261 
telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz
 d53557a60a56efdc747a31b659cdaaebc9c5e26e2ec210cda4aff37758967f29 118216 
telepathy-idle_0.1.11-2+deb7u1_amd64.deb
Files: 
 7621ba08744c21e45a9637017b699ce2 2292 net optional 
telepathy-idle_0.1.11-2+deb7u1.dsc
 c74045cfd73147b7be1308e6d8daefc3 7261 net optional 
telepathy-idle_0.1.11-2+deb7u1.debian.tar.gz
 ae958d4a92e1baa97a92b60d56f419b5 118216 net optional 
telepathy-idle_0.1.11-2+deb7u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=Ao3B
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1upnad-0004cv...@franck.debian.org



Accepted dbus 1.6.8-1+deb7u1 (source amd64 all)

2013-06-16 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 12 Jun 2013 21:41:24 BST
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source amd64 all
Version: 1.6.8-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus - simple interprocess messaging system (daemon and utilities)
 dbus-x11 - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system (library)
 dbus-1-doc - simple interprocess messaging system (documentation)
 libdbus-1-dev - simple interprocess messaging system (development headers)
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
Changes: 
 dbus (1.6.8-1+deb7u1) wheezy-security; urgency=high
 .
   * CVE-2013-2168: add patch to avoid a user-triggerable crash
 (denial of services) in system services that use libdbus
Checksums-Sha256: 
 5b18d2ccaf6d2ed539703df5e7c2ed1085a8379618e2bb07167c1c6787cb60f2 2535 
dbus_1.6.8-1+deb7u1.dsc
 e34991ad02b2e58463f01a026001cc8dcdea9608f96c81fe113d85db22c70548 35196 
dbus_1.6.8-1+deb7u1.debian.tar.gz
 cd8c666ce9534874c72564915032e2e93cb37c7a54964adce71119268874ff0d 398906 
dbus_1.6.8-1+deb7u1_amd64.deb
 02c399bb8fa79980e3c674936abbd2cb2447cb6fe1cf1109b8d3e17ed9779344 59638 
dbus-x11_1.6.8-1+deb7u1_amd64.deb
 4e6d5182a97a1c919ec0c1d06216184bb44d6c49ccdbddde11ca7364c9a66ae5 172578 
libdbus-1-3_1.6.8-1+deb7u1_amd64.deb
 4fe658595a0cbaace60a21c5101fd72b42ce611db683be53724346a1556d99ba 2382588 
dbus-1-doc_1.6.8-1+deb7u1_all.deb
 5eabcf8da7230c12f2600a29a206e0430214e2c940db28303a387c88e6be32e7 246440 
libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb
 c81ea3afd9b6a37222485f63246f4c50b485b46432914944e16bd65e1464847c 8287174 
dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb
 fc1370ef38abeeb13f55c905ec002e60705fb0bfde3b8d21c8d6eb8056c11bac 1929630 
dbus_1.6.8.orig.tar.gz
Checksums-Sha1: 
 ee50b09e2fc3a41d3a8423bf9402c13bf69db5e9 2535 dbus_1.6.8-1+deb7u1.dsc
 f2460be62aa16ba45323e012e6d20deb54781d7a 35196 
dbus_1.6.8-1+deb7u1.debian.tar.gz
 4b4bd1831f62cc7c29bdf67a7f9250e0411cefb5 398906 dbus_1.6.8-1+deb7u1_amd64.deb
 f6ace975ecacb6ac3eba18c71ea67e48621ca2ab 59638 
dbus-x11_1.6.8-1+deb7u1_amd64.deb
 624f93ecd57f7a0d0aa36e2e7885203885206432 172578 
libdbus-1-3_1.6.8-1+deb7u1_amd64.deb
 e3fcaeef65a7048f75753bb87b770268a2e89e3c 2382588 
dbus-1-doc_1.6.8-1+deb7u1_all.deb
 62da0f0f54290d5596280d047657bc2f6b319439 246440 
libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb
 46f95e9303381277f4afa18dea5e0bcdc0f9a07c 8287174 
dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb
 d9634807d1de9b64727ae2178e3af2227fca0fca 1929630 dbus_1.6.8.orig.tar.gz
Files: 
 310e4089986d6370f448788c4107e5c4 2535 admin optional dbus_1.6.8-1+deb7u1.dsc
 82c6d69823b580a667115f4396d71858 35196 admin optional 
dbus_1.6.8-1+deb7u1.debian.tar.gz
 f6f7e34057d45c6c39bfd4013e25f967 398906 admin optional 
dbus_1.6.8-1+deb7u1_amd64.deb
 ec36563a39fc902053527ce2428ec4de 59638 x11 optional 
dbus-x11_1.6.8-1+deb7u1_amd64.deb
 b828d8c7ed9248206d59fd27bb0dd586 172578 libs optional 
libdbus-1-3_1.6.8-1+deb7u1_amd64.deb
 f4789325b88f9a2d5be8e36bb149a5ae 2382588 doc optional 
dbus-1-doc_1.6.8-1+deb7u1_all.deb
 9b8ecddb155800e3b7714b5975bfc159 246440 libdevel optional 
libdbus-1-dev_1.6.8-1+deb7u1_amd64.deb
 0a479786e0035e62edc8b75a8b6a4716 8287174 debug extra 
dbus-1-dbg_1.6.8-1+deb7u1_amd64.deb
 3bf059c7dd5eda5f539a1b7cfe7a14a2 1929630 admin optional dbus_1.6.8.orig.tar.gz

-BEGIN PGP SIGNATURE-
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=tECe
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1uohmk-0005he...@franck.debian.org



Accepted telepathy-gabble 0.9.15-1+squeeze2 (source amd64)

2013-06-05 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 29 May 2013 17:48:03 +0100
Source: telepathy-gabble
Binary: telepathy-gabble telepathy-gabble-dbg
Architecture: source amd64
Version: 0.9.15-1+squeeze2
Distribution: squeeze-security
Urgency: high
Maintainer: Debian Telepathy maintainers 

Changed-By: Simon McVittie 
Description: 
 telepathy-gabble - Jabber/XMPP connection manager
 telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols)
Changes: 
 telepathy-gabble (0.9.15-1+squeeze2) squeeze-security; urgency=high
 .
   * CVE-2013-1431: respect the require-encryption flag on legacy Jabber
 servers
Checksums-Sha1: 
 d99dde7e6248101b6865008f789c04949e3b0be9 2402 
telepathy-gabble_0.9.15-1+squeeze2.dsc
 9c1b06be4b717bd4d3119264176de386a02d1c52 12481 
telepathy-gabble_0.9.15-1+squeeze2.diff.gz
 a66be242d339e1addaf1989a2c033c1cd9cf9609 1197104 
telepathy-gabble_0.9.15-1+squeeze2_amd64.deb
 4051f7c5636d542aec7ff70c22eac2d7867f485c 1744920 
telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb
Checksums-Sha256: 
 1e8f0748a44e679d8e42b376adaffd49fbfedda3354521b5c31eda3b2a0bef12 2402 
telepathy-gabble_0.9.15-1+squeeze2.dsc
 aa594ce021c9d1612d6e2f67a4f1ce785d29430108519f022ed505b61fd96f83 12481 
telepathy-gabble_0.9.15-1+squeeze2.diff.gz
 2e663e13b8c256a9265e09c5635403ce64789ec370bb1880e7f8e78766408fa1 1197104 
telepathy-gabble_0.9.15-1+squeeze2_amd64.deb
 d38359b11552cd03f0a7d997c1398281b0116f02e160f7830d211826565234a7 1744920 
telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb
Files: 
 06402d3989b4e78ba649eb8fa58fd062 2402 net optional 
telepathy-gabble_0.9.15-1+squeeze2.dsc
 1d1b2703f96ac00aedb9264612fbebc7 12481 net optional 
telepathy-gabble_0.9.15-1+squeeze2.diff.gz
 01d30d862ed56845507a5d5de673a135 1197104 net optional 
telepathy-gabble_0.9.15-1+squeeze2_amd64.deb
 72666484652192cdb35b0b45188633e9 1744920 debug extra 
telepathy-gabble-dbg_0.9.15-1+squeeze2_amd64.deb

-BEGIN PGP SIGNATURE-
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=f/nD
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ukmuk-0006fq...@franck.debian.org



Accepted telepathy-gabble 0.16.5-1+deb7u1 (source amd64)

2013-06-03 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 29 May 2013 17:35:22 +0100
Source: telepathy-gabble
Binary: telepathy-gabble telepathy-gabble-dbg
Architecture: source amd64
Version: 0.16.5-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Telepathy maintainers 

Changed-By: Simon McVittie 
Description: 
 telepathy-gabble - Jabber/XMPP connection manager
 telepathy-gabble-dbg - Jabber/XMPP connection manager (debug symbols)
Changes: 
 telepathy-gabble (0.16.5-1+deb7u1) wheezy-security; urgency=high
 .
   * CVE-2013-1431: respect the require-encryption flag on legacy Jabber
 servers.
 This flag is on by default: to connect to legacy Jabber servers,
 either disable "Encryption required (TLS/SSL)" or enable "Use old SSL".
Checksums-Sha1: 
 7f4a3529f382726975709dbc6057507a34d21e3d 2507 
telepathy-gabble_0.16.5-1+deb7u1.dsc
 6553fe69ccaa9926458d282893ad3d94ac9180e0 2635272 
telepathy-gabble_0.16.5.orig.tar.gz
 371fadde9c8717169286ec4c9ed81e15b10c425c 13609 
telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz
 71ae47810225e157f8d94f6868481ea9a061a61b 814368 
telepathy-gabble_0.16.5-1+deb7u1_amd64.deb
 5efd2b991e03241348f46664338bfda9ce0883e8 2126128 
telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb
Checksums-Sha256: 
 dc24222da5014e363f3f7149760f511253c2a46a20e927896e837bd486b0f4b2 2507 
telepathy-gabble_0.16.5-1+deb7u1.dsc
 fdadd2b61f2ed912af20df9766adb6ddafb156f174840c7a305e9f19efa16d33 2635272 
telepathy-gabble_0.16.5.orig.tar.gz
 330a95a295ee121c389c196f53cdf9e553818f2dc2382ca85fbc0a092840d9fc 13609 
telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz
 1f8afa98560dc52470e390e69d5192e58a22ae39cf269e333deec5e0e71f9f0a 814368 
telepathy-gabble_0.16.5-1+deb7u1_amd64.deb
 89a8eaffa1af48b5b7a7aba1c2054188efda5e40688e70bc354fef866748f4bf 2126128 
telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb
Files: 
 839173a6853756336173292c1e71eac8 2507 net optional 
telepathy-gabble_0.16.5-1+deb7u1.dsc
 06eab928c1d147029ee33be53a03710c 2635272 net optional 
telepathy-gabble_0.16.5.orig.tar.gz
 e3f2b84a2f1101a9bc1d66ecbad31919 13609 net optional 
telepathy-gabble_0.16.5-1+deb7u1.debian.tar.gz
 181cd490f188697c5b21889a9c339dd1 814368 net optional 
telepathy-gabble_0.16.5-1+deb7u1_amd64.deb
 adce98852e314d5f65763701635ab054 2126128 debug extra 
telepathy-gabble-dbg_0.16.5-1+deb7u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=/R59
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ujd3p-0007ln...@franck.debian.org



Accepted empathy 3.4.2.3-2+deb7u1 (source all amd64)

2013-05-14 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 13 May 2013 09:25:02 +0100
Source: empathy
Binary: empathy empathy-dbg empathy-common nautilus-sendto-empathy
Architecture: source all amd64
Version: 3.4.2.3-2+deb7u1
Distribution: stable
Urgency: low
Maintainer: Debian Telepathy maintainers 

Changed-By: Simon McVittie 
Description: 
 empathy- GNOME multi-protocol chat and call client
 empathy-common - GNOME multi-protocol chat and call client (common files)
 empathy-dbg - GNOME multi-protocol chat and call client (debug symbols)
 nautilus-sendto-empathy - GNOME multi-protocol chat and call client 
(nautilus-sendto plugin
Closes: 706900
Changes: 
 empathy (3.4.2.3-2+deb7u1) stable; urgency=low
 .
   * gbp.conf: set branch to debian-wheezy
   * Backport patch from upstream 3.8 branch to avoid a crash now that
 Google Talk vCards can contain a (read-only)  field, which is
 not flagged as supported in telepathy-gabble. (Closes: #706900)
Checksums-Sha1: 
 bb37f3070971a1a9d6ea478e8af9bc6e515ba075 3455 empathy_3.4.2.3-2+deb7u1.dsc
 0366de22be3237017f13d0c7900a81754a11d1eb 22174 
empathy_3.4.2.3-2+deb7u1.debian.tar.gz
 e876fac1e7a93cef2b2418ac6b4ba6a2818d0cc1 2451912 
empathy-common_3.4.2.3-2+deb7u1_all.deb
 a1ab527ab1845be4167f4bf7295f2a4ba08222b0 1562996 
empathy_3.4.2.3-2+deb7u1_amd64.deb
 b99a13ccd50ef11a9ce94fd84573c01aa9f51909 3622292 
empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb
 7cc3ecd9f18eb6743a055e3c7427f1e3f8e40a4d 1123404 
nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb
Checksums-Sha256: 
 e6d294911019e93113f1e6c06898d49d307bc6de79e04579476e9d3c684afc0c 3455 
empathy_3.4.2.3-2+deb7u1.dsc
 2414df3d7cb0795131c3be0983d40d19ea58238d212cb551c2cc244f12542790 22174 
empathy_3.4.2.3-2+deb7u1.debian.tar.gz
 90dae84f38dd38545a90dbb115770d5fc9eeb2b6cb7c4b89f2b6e7c14c86fd46 2451912 
empathy-common_3.4.2.3-2+deb7u1_all.deb
 9f9df83e4edb8f23c068746afa45eec893f1abc14c537d48bcb900fc9d9a2e52 1562996 
empathy_3.4.2.3-2+deb7u1_amd64.deb
 35c496298f12aa1eeebb4a5f977f6343aea8b68d0cd42827f13e7ed3a8caa9ee 3622292 
empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb
 cca6d37f09107b16fd17bf49b7ee0528edce484b7388ae036e6531ff76f96daf 1123404 
nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb
Files: 
 aa3a595924eee13bff05894b35250606 3455 gnome optional 
empathy_3.4.2.3-2+deb7u1.dsc
 0f29f8bea79816c2eecd3bdb6e075b5d 22174 gnome optional 
empathy_3.4.2.3-2+deb7u1.debian.tar.gz
 09b9e188fc5168e596f6d9da70e10470 2451912 gnome optional 
empathy-common_3.4.2.3-2+deb7u1_all.deb
 33ad1c1820699106ef1446c393f04773 1562996 gnome optional 
empathy_3.4.2.3-2+deb7u1_amd64.deb
 e8f7eb59fdd775347282bb01b0299c5f 3622292 debug extra 
empathy-dbg_3.4.2.3-2+deb7u1_amd64.deb
 9cb38b6e6dba5aac9fb9744ba8346493 1123404 gnome optional 
nautilus-sendto-empathy_3.4.2.3-2+deb7u1_amd64.deb

-BEGIN PGP SIGNATURE-
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=DIiu
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ucmao-0008nx...@franck.debian.org



Accepted dbus-glib 0.88-2.1+squeeze1 (source all amd64)

2013-02-18 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 15 Feb 2013 17:58:34 +
Source: dbus-glib
Binary: libdbus-glib-1-dev libdbus-glib-1-2 libdbus-glib-1-doc 
libdbus-glib-1-2-dbg
Architecture: source all amd64
Version: 0.88-2.1+squeeze1
Distribution: stable
Urgency: low
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 libdbus-glib-1-2 - simple interprocess messaging system (GLib-based shared 
library)
 libdbus-glib-1-2-dbg - simple interprocess messaging system (GLib library 
debug symbols)
 libdbus-glib-1-dev - simple interprocess messaging system (GLib interface)
 libdbus-glib-1-doc - simple interprocess messaging system (GLib library 
documentation)
Closes: 700638
Changes: 
 dbus-glib (0.88-2.1+squeeze1) stable; urgency=low
 .
   * Apply patch from upstream 0.100.1 to fix insufficient checking
 leading to authentication bypass in pam_fprintd (CVE-2013-0292)
 (Closes: #700638)
Checksums-Sha1: 
 4066be1400dc0d9eed0ca853206850fad495f3e1 2171 dbus-glib_0.88-2.1+squeeze1.dsc
 d13366afbdb130a8e515ed1af515d86a4be6dca2 19577 
dbus-glib_0.88-2.1+squeeze1.diff.gz
 c3b9543727e6c278f134aae67890fe2051a4fa5f 149698 
libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb
 99d5c1b9f04b79e3561a8c5dac309f6415a9b7ab 225884 
libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb
 b80b4e94d00a45c8eb6cf35b023ec4c5ca84f951 172742 
libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb
 d3be6f5d48aec206db93cf7400191d2a61200424 277114 
libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb
Checksums-Sha256: 
 06b96c903563ad13183779a21d247939a1f2957c22d87f18c381ed9bfc18c84b 2171 
dbus-glib_0.88-2.1+squeeze1.dsc
 7a678a82c2021ecec5e5c6b336a369cff41484b49ef26b0bb8c5df3414345119 19577 
dbus-glib_0.88-2.1+squeeze1.diff.gz
 e4ff3a05deead6bfd2045e4c60491208d635e268f8d4fde1d99faabd8a53353c 149698 
libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb
 548e8974126ed894cdc5ef1e7a4b719e7e45fda5511301f5b851e9359567c8ec 225884 
libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb
 07d7ab68a257b382b426b82f35da312de858f09154499eacc3f2a6022ebe850e 172742 
libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb
 c40c9d3019b933160f9ac973b6467ed9635acf9f270b0de494567e3a83f1121c 277114 
libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb
Files: 
 bd836fb9d50c92425cf201975c9a1f25 2171 devel optional 
dbus-glib_0.88-2.1+squeeze1.dsc
 0df12e84015e72bbe74cbcf26b123bfe 19577 devel optional 
dbus-glib_0.88-2.1+squeeze1.diff.gz
 441e1803e5a48b0ff833a9aee534c17a 149698 doc optional 
libdbus-glib-1-doc_0.88-2.1+squeeze1_all.deb
 f8c456b66ffc252af7f3b8534baa5911 225884 libdevel optional 
libdbus-glib-1-dev_0.88-2.1+squeeze1_amd64.deb
 ec810b7bcbcf7e9000b32aac87073c12 172742 libs optional 
libdbus-glib-1-2_0.88-2.1+squeeze1_amd64.deb
 42ed6b4f02e9581eda93b9459f061e59 277114 debug extra 
libdbus-glib-1-2-dbg_0.88-2.1+squeeze1_amd64.deb

-BEGIN PGP SIGNATURE-
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=Wcu0
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1u7unx-0005vq...@franck.debian.org



Accepted dbus 1.2.24-4+squeeze2 (source all i386)

2013-01-12 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 04 Oct 2012 08:47:10 +0100
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source all i386
Version: 1.2.24-4+squeeze2
Distribution: squeeze
Urgency: low
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus   - simple interprocess messaging system
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system
 libdbus-1-dev - simple interprocess messaging system (development headers)
Closes: 689070
Changes: 
 dbus (1.2.24-4+squeeze2) stable; urgency=low
 .
   * CVE-2012-3524: apply patches from upstream 1.6.6 to avoid arbitrary
 code execution in setuid/setgid binaries that incorrectly use libdbus
 without first sanitizing the environment variables inherited from
 their less-privileged caller (Closes: #689070).
 - As per upstream 1.6.8, do not check filesystem capabilities for now,
   only setuid/setgid, fixing regressions in certain configurations of
   gnome-keyring
Checksums-Sha1: 
 eac32b869c61bd5d847be756a340fe7cd5a7d23e 2186 dbus_1.2.24-4+squeeze2.dsc
 94ee1a0ac39aeffd1e376ef7029d35afd7a60179 37961 
dbus_1.2.24-4+squeeze2.debian.tar.gz
 b00fc229b77fd00cbc3fb825cc650431c69c2d73 1837900 
dbus-1-doc_1.2.24-4+squeeze2_all.deb
 6f4f5ea0851ace56f03acb222c19071f9599d239 213666 dbus_1.2.24-4+squeeze2_i386.deb
 4e501b3ac3d77e35edbf4d6366ca6dbd05e9ae60 42564 
dbus-x11_1.2.24-4+squeeze2_i386.deb
 ab10693f2ec6a50fd07dc9863b07fa78d9305cc8 130512 
libdbus-1-3_1.2.24-4+squeeze2_i386.deb
 99c8cdfd13bce8df56770c670230f7887820d7b0 221096 
libdbus-1-dev_1.2.24-4+squeeze2_i386.deb
 e73b75d59d6eed63f7aa8616dd8cfdc9fca0001a 770860 
dbus-1-dbg_1.2.24-4+squeeze2_i386.deb
Checksums-Sha256: 
 6660bed259a4bbb5e15788bf305c8b2465acb2a33dbb1d01f23d6fca2ac5cfd0 2186 
dbus_1.2.24-4+squeeze2.dsc
 a32dd583f3cc6a5aef6897e8b792510c21092d1b0d5655c2755b0af4be855964 37961 
dbus_1.2.24-4+squeeze2.debian.tar.gz
 87a4669d904f843c0037d23a9b68b0d1283aa93179b9ca06c384c3b7756bc743 1837900 
dbus-1-doc_1.2.24-4+squeeze2_all.deb
 2c4e9aa80db1d0eb95b55b7373975a5c4dacdccd6da056a700c14aef630aac25 213666 
dbus_1.2.24-4+squeeze2_i386.deb
 0563cf55a3a03904827db461f35269465ad0a8ab5c6d92889ead5cc5540e22e8 42564 
dbus-x11_1.2.24-4+squeeze2_i386.deb
 bb9e6cca67fcc5b6c27c4674d89d862da0e5ea8eb66b4c8833b0daacdf3138fe 130512 
libdbus-1-3_1.2.24-4+squeeze2_i386.deb
 7457a9d32a5ae686841f3099b2813e965b8d09e32dc7c04b5efb171ce51349ad 221096 
libdbus-1-dev_1.2.24-4+squeeze2_i386.deb
 82f2ea80d494f73abaf9273c10bb1bcbe0fd77ceed7213bcf550f2e31ecc72fe 770860 
dbus-1-dbg_1.2.24-4+squeeze2_i386.deb
Files: 
 d2bb0c9a9cbbef845d579c34291c50c2 2186 devel optional dbus_1.2.24-4+squeeze2.dsc
 7bb2156d28f38454813c32bf48c98557 37961 devel optional 
dbus_1.2.24-4+squeeze2.debian.tar.gz
 1754df1871da923df3f85ec308213901 1837900 doc optional 
dbus-1-doc_1.2.24-4+squeeze2_all.deb
 bfd457341ce560037613cfd493de300d 213666 devel optional 
dbus_1.2.24-4+squeeze2_i386.deb
 8d287c2ff8e57960fb4f2af337616789 42564 x11 optional 
dbus-x11_1.2.24-4+squeeze2_i386.deb
 762242a9e0f39aaf41e0b5bf66c0b99c 130512 libs optional 
libdbus-1-3_1.2.24-4+squeeze2_i386.deb
 230538d9a0d7c304c6a7b62720790a9c 221096 libdevel optional 
libdbus-1-dev_1.2.24-4+squeeze2_i386.deb
 e6d06ad29e9d581c80b4b615595c4349 770860 debug extra 
dbus-1-dbg_1.2.24-4+squeeze2_i386.deb

-BEGIN PGP SIGNATURE-
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=stEJ
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1tuan2-0006l7...@franck.debian.org



Accepted openarena 0.8.5-5+squeeze3 (source i386)

2012-04-13 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 29 Mar 2012 20:40:46 +0100
Source: openarena
Binary: openarena openarena-server
Architecture: source i386
Version: 0.8.5-5+squeeze3
Distribution: stable-security
Urgency: low
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 openarena  - fast-paced 3D first-person shooter
 openarena-server - server and game logic for the game OpenArena
Closes: 665945
Changes: 
 openarena (0.8.5-5+squeeze3) stable-security; urgency=low
 .
   * Add CVE reference to changelog and patch for previous version, now that
 one has been allocated
   * Incorporate ioquake3 r1763 into the patch for rate-limiting, to fix
 potential use of uninitialized variables if the network address family
 is unexpected
   * Apply ioquake3 r1898 to fix a regression caused by rate-limiting,
 in which the server would stop responding to getstatus after an uptime
 of 2**32 milliseconds (approximately 50 days) (Closes: #665945)
Checksums-Sha1: 
 5c62c164675c8f57f68f72446b0c6442b782d410 2099 openarena_0.8.5-5+squeeze3.dsc
 06ceb4e5e68a0ac1a2e89e7ff989275ec2c95296 248538 
openarena_0.8.5-5+squeeze3.debian.tar.gz
 4a34c56a841eb1d0b3cd0e985e121c2740bdad3a 76 
openarena_0.8.5-5+squeeze3_i386.deb
 771130d8a142f1a6592d052777946ff73f50fa47 2312550 
openarena-server_0.8.5-5+squeeze3_i386.deb
Checksums-Sha256: 
 bd6b036cf9091a1040bac80f73755392fb6d1260302c5312d4cafc71da2b04fe 2099 
openarena_0.8.5-5+squeeze3.dsc
 9564f187fb73cc0245e094db89eb44b1bf39d7a5bcdbd9a931fff8fd7bb23f12 248538 
openarena_0.8.5-5+squeeze3.debian.tar.gz
 3cb96425fc96e27d2169d63f45af16b222b16ea32e7ef0a2468316090c1fa2aa 76 
openarena_0.8.5-5+squeeze3_i386.deb
 e8cc3139509f11e0c803b77a710da0e32deedf631584b3ca164e70a31a8a9829 2312550 
openarena-server_0.8.5-5+squeeze3_i386.deb
Files: 
 49b44cf397e69a2a073a7f2171edd46a 2099 games optional 
openarena_0.8.5-5+squeeze3.dsc
 7e8e56720f5e7e90530455b641343038 248538 games optional 
openarena_0.8.5-5+squeeze3.debian.tar.gz
 acf2896ff04eecd0ff6e378d75de711f 76 games optional 
openarena_0.8.5-5+squeeze3_i386.deb
 3d9bbcc1b5f1acb67e424a3de46e1e6f 2312550 games optional 
openarena-server_0.8.5-5+squeeze3_i386.deb

-BEGIN PGP SIGNATURE-
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=K2vJ
-END PGP SIGNATURE-


Accepted:
openarena-server_0.8.5-5+squeeze3_i386.deb
  to main/o/openarena/openarena-server_0.8.5-5+squeeze3_i386.deb
openarena_0.8.5-5+squeeze3.debian.tar.gz
  to main/o/openarena/openarena_0.8.5-5+squeeze3.debian.tar.gz
openarena_0.8.5-5+squeeze3.dsc
  to main/o/openarena/openarena_0.8.5-5+squeeze3.dsc
openarena_0.8.5-5+squeeze3_i386.deb
  to main/o/openarena/openarena_0.8.5-5+squeeze3_i386.deb


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1silje-0003xh...@franck.debian.org



Accepted tremulous 1.1.0-8~squeeze1 (source i386 all)

2012-04-01 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 29 Mar 2012 20:40:49 +0100
Source: tremulous
Binary: tremulous tremulous-server tremulous-doc
Architecture: source i386 all
Version: 1.1.0-8~squeeze1
Distribution: stable
Urgency: low
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 tremulous  - Aliens vs Humans, team based FPS game with elements of an RTS
 tremulous-doc - Tremulous documentation
 tremulous-server - Tremulous server
Changes: 
 tremulous (1.1.0-8~squeeze1) stable; urgency=low
 .
   * Stable update, incorporating a security fix from unstable
Checksums-Sha1: 
 4913c6daef90f7708861115de1bc708d48a05892 1886 tremulous_1.1.0-8~squeeze1.dsc
 3fae4813a75d09d7911ef5bcf25296f5c981f33d 42038 
tremulous_1.1.0-8~squeeze1.debian.tar.gz
 58247dd30b3d6d937681e5a6df7b47c280218939 675956 
tremulous_1.1.0-8~squeeze1_i386.deb
 955317ee70242b7fdb7f0d6fe70eeca46c8ed7a1 352734 
tremulous-server_1.1.0-8~squeeze1_i386.deb
 7d28983c61040478b7189f1bd54a6b149e30a46b 646134 
tremulous-doc_1.1.0-8~squeeze1_all.deb
Checksums-Sha256: 
 fbff68320a3961fb19ad609d6dadce5416dbe949cdcadb76be0fec086c0ba50f 1886 
tremulous_1.1.0-8~squeeze1.dsc
 e83e3dd3c66ec9dfe0f7c9d477fadbbffbdf2e27ff0cd3d2d7ede83709a55052 42038 
tremulous_1.1.0-8~squeeze1.debian.tar.gz
 78c46abd5d3e005889c27d609a0c7c9635c7953dd7ca27826d9fd3ed2f73288b 675956 
tremulous_1.1.0-8~squeeze1_i386.deb
 6ec111bdd287cfa7616aa31ba3dec404760eb6e32f79c451620c3f38b535b87f 352734 
tremulous-server_1.1.0-8~squeeze1_i386.deb
 e149184dc6e56a0940153a651e07ae993b15e6de5ca186888a2e094f8d72adca 646134 
tremulous-doc_1.1.0-8~squeeze1_all.deb
Files: 
 90e78f7de3651f2729e274234162d63c 1886 contrib/games optional 
tremulous_1.1.0-8~squeeze1.dsc
 349b1fa234d4987ee1d8ac0e650ac8ff 42038 contrib/games optional 
tremulous_1.1.0-8~squeeze1.debian.tar.gz
 7e386cb1a6e0d3b0a6eb07d63f0aa615 675956 contrib/games optional 
tremulous_1.1.0-8~squeeze1_i386.deb
 37868222be9a9026f2f2e7d07f53cd46 352734 contrib/games optional 
tremulous-server_1.1.0-8~squeeze1_i386.deb
 9b7b9ea11df3ecc5ef907a3bea2d2075 646134 contrib/doc optional 
tremulous-doc_1.1.0-8~squeeze1_all.deb

-BEGIN PGP SIGNATURE-
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=pHdN
-END PGP SIGNATURE-


Accepted:
tremulous-doc_1.1.0-8~squeeze1_all.deb
  to contrib/t/tremulous/tremulous-doc_1.1.0-8~squeeze1_all.deb
tremulous-server_1.1.0-8~squeeze1_i386.deb
  to contrib/t/tremulous/tremulous-server_1.1.0-8~squeeze1_i386.deb
tremulous_1.1.0-8~squeeze1.debian.tar.gz
  to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1.debian.tar.gz
tremulous_1.1.0-8~squeeze1.dsc
  to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1.dsc
tremulous_1.1.0-8~squeeze1_i386.deb
  to contrib/t/tremulous/tremulous_1.1.0-8~squeeze1_i386.deb


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ses9n-0006vj...@franck.debian.org



Accepted openarena 0.8.5-5+squeeze2 (source i386)

2012-03-27 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 25 Mar 2012 19:34:53 +0100
Source: openarena
Binary: openarena openarena-server
Architecture: source i386
Version: 0.8.5-5+squeeze2
Distribution: stable-security
Urgency: low
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 openarena  - fast-paced 3D first-person shooter
 openarena-server - server and game logic for the game OpenArena
Closes: 665656
Changes: 
 openarena (0.8.5-5+squeeze2) stable-security; urgency=low
 .
   * Apply ioquake3 r1762 to rate-limit getstatus and rcon connectionless
 packets, to avoid their use for traffic amplification. (Closes: #665656)
Checksums-Sha1: 
 7046d95c04526b472ff0608dc3293110d4167664 2099 openarena_0.8.5-5+squeeze2.dsc
 00f4cb42f3548d3a8af0e8fe5c69da5263fd4e88 2653889 openarena_0.8.5.orig.tar.bz2
 ca15b82b2633c8ec5c9f096d8f871b5bea474d31 247425 
openarena_0.8.5-5+squeeze2.debian.tar.gz
 18415db20d382dc9b4d1ac538e96e124a2a4a366 744262 
openarena_0.8.5-5+squeeze2_i386.deb
 b04914f7cc179f37f5bd851ebc70145e645b42c6 2312412 
openarena-server_0.8.5-5+squeeze2_i386.deb
Checksums-Sha256: 
 eb80b2220f6318ce34e99ae4786e0ac3d190e22c97cc5113713714e2054f70d2 2099 
openarena_0.8.5-5+squeeze2.dsc
 3e9ccd58f1a95d4a103f4729ed6a6c88174503cfea1b4c13bf723ec8916a17e5 2653889 
openarena_0.8.5.orig.tar.bz2
 ef7fdfb30628b30588e4b14d0a868cfdd61a2422b2799c09756ceccfc8eb4d73 247425 
openarena_0.8.5-5+squeeze2.debian.tar.gz
 6b83ca2463f2976e7e0c6d44273507321c1af9e87cce519c83b9a6cd339ef7e1 744262 
openarena_0.8.5-5+squeeze2_i386.deb
 f98591de8eed66352b45d92034c75500991294faabe4fa026c168993a205bda7 2312412 
openarena-server_0.8.5-5+squeeze2_i386.deb
Files: 
 689473cd2be80adcfbabcf1ec32d208d 2099 games optional 
openarena_0.8.5-5+squeeze2.dsc
 04881c50a17e0ee3ffdbb9416e8f1259 2653889 games optional 
openarena_0.8.5.orig.tar.bz2
 20529074fe6dd924a18eb82aafffaa53 247425 games optional 
openarena_0.8.5-5+squeeze2.debian.tar.gz
 e0a622957f15c98f5de65333505bb767 744262 games optional 
openarena_0.8.5-5+squeeze2_i386.deb
 02885dc243f013fde743d1454bc00a00 2312412 games optional 
openarena-server_0.8.5-5+squeeze2_i386.deb

-BEGIN PGP SIGNATURE-

iQIVAwUBT3AxJ03o/ypjx8yQAQhqaxAAghqHg3dr9Q7VGxxXqta14Vcsq6jTs9W6
tijevfFJrK6k0SPwemb5yisscMxKf0WciiRt+YkNH7YuU5bT9BetH5DYgXnIssDl
r5EChQPs2qB3a33/0KINmhRqGdQX867p+p60M2DtuYXs0QdSc/4GAMjztlYaz2s6
yXEknwrmms+4z3sVhE+mdAkYeE9xTRVyRoCMTcKEcd8naooHYhD9ejJsGXKG2q97
gOkDZambC3XnTD4fWb01ii+C9HDG+t18x9zvlp/kWDdCvjG/xIZLBFgyUJ5fwALT
Nu8u6XyE8QZjEIXqt61Naye6keqRfWsKnLd2tI+mnirG387+k9Ou9o1JmhYmuLv8
aim8R7R/szmGXvdcIZxSGT9gIu4Inz6qXxoBqrYnzSWlydCAI2utNzSxcu+1wKch
iWNr3tjvzrNUhcIhS4EThWSD4rX+oyKRzmXXuIS45MRuRRHZ+Ep2/OtkA9tv36Qe
Fohrjwqinq/mrp3FVmeVKAY52rP06GYulKT0JuKAiPfG/w4AHl5JafJT74yQMSlx
MeTwxkuSfL1ueQ3SL0vto5uOQ/R8WaTYbceE7IlFx3g5TvxlQ0uh/hRxUrUNfaBP
TM5P0heCahxr7fhZZTTtTwwaxPHFNNpMSTR4KstWKMThcbkXXPevfQc1A3tVbTpy
mA2g9JI+ExA=
=25RM
-END PGP SIGNATURE-


Accepted:
openarena-server_0.8.5-5+squeeze2_i386.deb
  to main/o/openarena/openarena-server_0.8.5-5+squeeze2_i386.deb
openarena_0.8.5-5+squeeze2.debian.tar.gz
  to main/o/openarena/openarena_0.8.5-5+squeeze2.debian.tar.gz
openarena_0.8.5-5+squeeze2.dsc
  to main/o/openarena/openarena_0.8.5-5+squeeze2.dsc
openarena_0.8.5-5+squeeze2_i386.deb
  to main/o/openarena/openarena_0.8.5-5+squeeze2_i386.deb


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1scc7m-00055f...@franck.debian.org



Accepted tremulous 1.1.0-7~squeeze1 (source i386 all)

2012-03-26 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 25 Mar 2012 13:53:09 +0100
Source: tremulous
Binary: tremulous tremulous-server tremulous-doc
Architecture: source i386 all
Version: 1.1.0-7~squeeze1
Distribution: stable
Urgency: medium
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 tremulous  - Aliens vs Humans, team based FPS game with elements of an RTS
 tremulous-doc - Tremulous documentation
 tremulous-server - Tremulous server
Closes: 660827 660830 660831 660832 660834 660836
Changes: 
 tremulous (1.1.0-7~squeeze1) stable; urgency=low
 .
   * Stable update (#663104), incorporating security fixes from unstable
   * Fix an incorrect bug number in revision -6
 .
 tremulous (1.1.0-7) unstable; urgency=medium
 .
   * Add a lintian override for embedded-library libjpeg (#589407) to avoid
 auto-rejection. It is a valid bug, but is not a regression, and fixing
 several long-standing security vulnerabilities seems more important
 than getting rid of an embedded library that is not known to be
 exploitable.
 .
 tremulous (1.1.0-6) unstable; urgency=medium
 .
   * Backport patches from ioquake3 to fix long-standing security bugs:
 - CVE-2006-2082: arbitrary file download from server by a malicious client
   (Closes: #660831)
 - CVE-2006-2236 ("the remapShader exploit"): missing bounds-checking on
   COM_StripExtension, exploitable in clients of a malicious server
   (Closes: #660827)
 - CVE-2006-2875 ("q3cbof"): buffer overflow in CL_ParseDownload by a
   malicious server (Closes: #660830)
 - CVE-2006-3324: arbitrary file overwriting in clients of a malicious
   server (Closes: #660832)
 - CVE-2006-3325: arbitrary cvar overwriting (could lead to arbitrary
   code execution) in clients of a malicious server (Closes: #660834)
 - CVE-2011-3012, CVE-2011-2764: DLL overwriting (leading to arbitrary
   code execution) in clients of a malicious server if auto-downloading
   is enabled (Closes: #660836)
   * As a precaution, disable auto-downloading
   * Backport ioquake3 r1141 to fix a potential buffer overflow in error
 handling (not known to be exploitable, but it can't hurt)
   * Add gcc attributes to all printf- and scanf-like functions, and
 fix non-literal format strings (again, none are known to be exploitable)
Checksums-Sha1: 
 093c757c268baf294ca21bf5c3134f1b27c63ccd 1886 tremulous_1.1.0-7~squeeze1.dsc
 824556728fc2c6d25e1236aa73cefd20cf798c80 39677 
tremulous_1.1.0-7~squeeze1.debian.tar.gz
 b660cef21e1d446fa3319883c51d3d6b5ef51106 674826 
tremulous_1.1.0-7~squeeze1_i386.deb
 06a0f1fd077587c19793cb35fabf887376087e26 351748 
tremulous-server_1.1.0-7~squeeze1_i386.deb
 b7e0b2fe05cb5c3cbd327d69e8f9397ba51440c4 645994 
tremulous-doc_1.1.0-7~squeeze1_all.deb
Checksums-Sha256: 
 1ee9da033efeb695a4466f6d21750176ac0114ef0f58731d93fe830104e477ed 1886 
tremulous_1.1.0-7~squeeze1.dsc
 d6b0e3e4fe5362e82970d0bc7122485d9ceaf501eb1d842c212bc3811e61c61f 39677 
tremulous_1.1.0-7~squeeze1.debian.tar.gz
 c44056831bce32a472cac71c256642e3b2ea6d98731ef0b374b7f3491e9b93fd 674826 
tremulous_1.1.0-7~squeeze1_i386.deb
 29b9b41418ea60ff11c99758e42a157c7776165f435eae36f9d0d2b240466d8f 351748 
tremulous-server_1.1.0-7~squeeze1_i386.deb
 acb7a04f9648594d97c3a05eb0d71d847425d13b5b9e239e41977fa62313b419 645994 
tremulous-doc_1.1.0-7~squeeze1_all.deb
Files: 
 1aa63c3fa97393579591711e3c9768c9 1886 contrib/games optional 
tremulous_1.1.0-7~squeeze1.dsc
 119bddb6b3b70513798a8c991d22668e 39677 contrib/games optional 
tremulous_1.1.0-7~squeeze1.debian.tar.gz
 b6fa83d46a72a0375642ef689f24239b 674826 contrib/games optional 
tremulous_1.1.0-7~squeeze1_i386.deb
 6909f73b47b0336243e22b5767e95a48 351748 contrib/games optional 
tremulous-server_1.1.0-7~squeeze1_i386.deb
 112bab3c2a43ee9218e1a66d65539b12 645994 contrib/doc optional 
tremulous-doc_1.1.0-7~squeeze1_all.deb

-BEGIN PGP SIGNATURE-
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=9D44
-END PGP SIGNATURE-


Accepted:
tremulous-doc_1.1.0-7~squeeze1_all.deb
  to contrib/t/tremulous/tremulous-doc_1.1.0-7~squeeze1_all.deb
tremulous-server_1.1.0-7~squeeze1_i386.deb
  to contrib/t/tremulous/tremulous-server_1.1.0-7~squeeze1_i386.deb
tremulous_1.1.0-7~squeeze1.deb

Accepted openarena 0.8.5-5+squeeze1 (source amd64)

2011-08-03 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Thu, 28 Jul 2011 14:22:31 +0100
Source: openarena
Binary: openarena openarena-server
Architecture: source amd64
Version: 0.8.5-5+squeeze1
Distribution: stable
Urgency: medium
Maintainer: Debian Games Team 
Changed-By: Simon McVittie 
Description: 
 openarena  - fast-paced 3D first-person shooter
 openarena-server - server and game logic for the game OpenArena
Closes: 635733
Changes: 
 openarena (0.8.5-5+squeeze1) stable; urgency=medium
 .
   * Apply upstream r2098 to fix arbitrary code execution by malicious QVM
 bytecode, which could be auto-downloaded from a malicious server
 if enabled. CVE-2011-2764 (Closes: #635733)
Checksums-Sha1: 
 6324e0908b10ca4cadd0180c046e6ddd97c2881f 2099 openarena_0.8.5-5+squeeze1.dsc
 79bb24858637b5edbe8c7f51d2c19721be191c0f 244882 
openarena_0.8.5-5+squeeze1.debian.tar.gz
 cc33baf2ffe0638aaf92605b1ea7a824fe8ff5b0 928160 
openarena_0.8.5-5+squeeze1_amd64.deb
 a89c63ebb580b4bf60559b0593ddd36ebd59a0c0 2764960 
openarena-server_0.8.5-5+squeeze1_amd64.deb
Checksums-Sha256: 
 65e774d64f6a4d35f1f39aed5f617eb95161dbb0991770c94b8681cd14db50b1 2099 
openarena_0.8.5-5+squeeze1.dsc
 90042a56561abe1b848ce35f1d72416c4efe05e421490f5e321ec4fbc919a66b 244882 
openarena_0.8.5-5+squeeze1.debian.tar.gz
 e0b482b8d175a72affd0ad9e446fcc761c3ed2c8b538a8507fc6d68a1c6daf18 928160 
openarena_0.8.5-5+squeeze1_amd64.deb
 2b2f509cdd6087c8dd08711878c38d16e00f8088852e8583d389f6be58dc1273 2764960 
openarena-server_0.8.5-5+squeeze1_amd64.deb
Files: 
 e994b70ef9fcfb312699d8d5207e045b 2099 games optional 
openarena_0.8.5-5+squeeze1.dsc
 2ba30d14332f2b1c8a8b52ded26be2dc 244882 games optional 
openarena_0.8.5-5+squeeze1.debian.tar.gz
 a44dce91fea8d3966b65059ae6421c93 928160 games optional 
openarena_0.8.5-5+squeeze1_amd64.deb
 767bd70893e485708f538cd1a6b2405e 2764960 games optional 
openarena-server_0.8.5-5+squeeze1_amd64.deb

-BEGIN PGP SIGNATURE-
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=NlUA
-END PGP SIGNATURE-


Accepted:
openarena-server_0.8.5-5+squeeze1_amd64.deb
  to main/o/openarena/openarena-server_0.8.5-5+squeeze1_amd64.deb
openarena_0.8.5-5+squeeze1.debian.tar.gz
  to main/o/openarena/openarena_0.8.5-5+squeeze1.debian.tar.gz
openarena_0.8.5-5+squeeze1.dsc
  to main/o/openarena/openarena_0.8.5-5+squeeze1.dsc
openarena_0.8.5-5+squeeze1_amd64.deb
  to main/o/openarena/openarena_0.8.5-5+squeeze1_amd64.deb


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1qohxh-0003ps...@franck.debian.org



Accepted dbus 1.2.24-4+squeeze1 (source all amd64)

2011-06-15 Thread Simon McVittie
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Tue, 14 Jun 2011 19:45:00 +0100
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev dbus-1-dbg
Architecture: source all amd64
Version: 1.2.24-4+squeeze1
Distribution: stable
Urgency: low
Maintainer: Utopia Maintenance Team 

Changed-By: Simon McVittie 
Description: 
 dbus   - simple interprocess messaging system
 dbus-1-dbg - simple interprocess messaging system (debug symbols)
 dbus-1-doc - simple interprocess messaging system (documentation)
 dbus-x11   - simple interprocess messaging system (X11 deps)
 libdbus-1-3 - simple interprocess messaging system
 libdbus-1-dev - simple interprocess messaging system (development headers)
Closes: 629938
Changes: 
 dbus (1.2.24-4+squeeze1) stable; urgency=low
 .
   * Update Vcs-* control fields to reflect the move to git
   * Apply patch to fix CVE-2011-2200 (fd.o #38120), which is a local DoS for
 system services (Closes: #629938)
Checksums-Sha1: 
 1f131b71c842fc8442611d1de55cbe99514e9c7f 2186 dbus_1.2.24-4+squeeze1.dsc
 a9c086190a93f50e02b3d3e65145db3c66ea3795 33628 
dbus_1.2.24-4+squeeze1.debian.tar.gz
 b163eb8a3167d3581e24e8fbb6834f914e88d920 1831250 
dbus-1-doc_1.2.24-4+squeeze1_all.deb
 0c496269a673c0181cbf3b065d8fe579f3eee006 233202 
dbus_1.2.24-4+squeeze1_amd64.deb
 3b2c4c73c0e2fa0528ca3c0a5c7c153f6227bb9c 42870 
dbus-x11_1.2.24-4+squeeze1_amd64.deb
 297210703f7c762b82171b5d8ddb1164616c7bfe 145398 
libdbus-1-3_1.2.24-4+squeeze1_amd64.deb
 0d125034ed689436814d19850105a9341f320362 244978 
libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb
 f8fc73f345fba810751c80a6cb5588ed8581d052 761536 
dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb
Checksums-Sha256: 
 96ab49cbf8c7deddb93de7d06122ab9c52e20087af3f5d21a762fb10ebe16651 2186 
dbus_1.2.24-4+squeeze1.dsc
 4115e3e31f8fc3f3267fdd5717a45310ec1fe5fa50f97a3d6b0d9b8bc55f 33628 
dbus_1.2.24-4+squeeze1.debian.tar.gz
 5a832cbeea34d22a0ab7a2eac4b619488ee299f960ced62ed677132d60d38b41 1831250 
dbus-1-doc_1.2.24-4+squeeze1_all.deb
 e6caba3a5394b13b38bdb56bdf7e1b949c025a8fadbb53c208dd3545a8e1002a 233202 
dbus_1.2.24-4+squeeze1_amd64.deb
 7503cf484bfcb194ddedc98801ee5389c1c1cebee20f25d0fe675ecd6edcd6b3 42870 
dbus-x11_1.2.24-4+squeeze1_amd64.deb
 b1629995788dc907ce50ed3bdca4b57cf1ba34aae646c2aaf4ef462d02a4739f 145398 
libdbus-1-3_1.2.24-4+squeeze1_amd64.deb
 f969a1075441b80503c019879851ec788b7e1c78e653fdfeb81705e84f6abffa 244978 
libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb
 6e54b44ec79f72c14e0a689add740abbcbad08b15d609383448de8692714fc0f 761536 
dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb
Files: 
 7ddda7dc53301c23197f42ca1bb1fc00 2186 devel optional dbus_1.2.24-4+squeeze1.dsc
 8e6be8290cad77c3212616768eba1ce7 33628 devel optional 
dbus_1.2.24-4+squeeze1.debian.tar.gz
 cc7114ff5f22691a23c4c6c13bef7755 1831250 doc optional 
dbus-1-doc_1.2.24-4+squeeze1_all.deb
 98df5f2a39fb990b8a385890bb0b95fb 233202 devel optional 
dbus_1.2.24-4+squeeze1_amd64.deb
 8b0ed0397524dbf5b5dfe0fa3e99b63a 42870 x11 optional 
dbus-x11_1.2.24-4+squeeze1_amd64.deb
 aec544f0daf37cbbecee20cfa127c4d6 145398 libs optional 
libdbus-1-3_1.2.24-4+squeeze1_amd64.deb
 4262818ce80e3b5d3db4b1df755fab30 244978 libdevel optional 
libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb
 7095a7ff67f5922245675f4276c1b84b 761536 debug extra 
dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb

-BEGIN PGP SIGNATURE-
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=GiL2
-END PGP SIGNATURE-


Accepted:
dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb
  to main/d/dbus/dbus-1-dbg_1.2.24-4+squeeze1_amd64.deb
dbus-1-doc_1.2.24-4+squeeze1_all.deb
  to main/d/dbus/dbus-1-doc_1.2.24-4+squeeze1_all.deb
dbus-x11_1.2.24-4+squeeze1_amd64.deb
  to main/d/dbus/dbus-x11_1.2.24-4+squeeze1_amd64.deb
dbus_1.2.24-4+squeeze1.debian.tar.gz
  to main/d/dbus/dbus_1.2.24-4+squeeze1.debian.tar.gz
dbus_1.2.24-4+squeeze1.dsc
  to main/d/dbus/dbus_1.2.24-4+squeeze1.dsc
dbus_1.2.24-4+squeeze1_amd64.deb
  to main/d/dbus/dbus_1.2.24-4+squeeze1_amd64.deb
libdbus-1-3_1.2.24-4+squeeze1_amd64.deb
  to main/d/dbus/libdbus-1-3_1.2.24-4+squeeze1_amd64.deb
libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb
  to main/d/dbus/libdbus-1-dev_1.2.24-4+squeeze1_amd64.deb


-- 
To UNSUBSCRIBE, email to debian-changes-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Conta