-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 Jan 2020 18:51:38 +0100 Source: libsolv Binary: libsolv0 libsolv-doc libsolv0-dev libsolvext0 libsolvext0-dev libsolv-tools python-solv python3-solv libsolv-perl libsolv0-dbg libsolvext0-dbg Architecture: source all amd64 Version: 0.6.5-1+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Mike Gabriel <sunweaver@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: libsolv-doc - dependency solver using a satisfiablility algorithm (documentatio libsolv-perl - dependency solver using a satisfiability algorithm (Perl bindings libsolv-tools - dependency solver using a satisfiability algorithm (command-line libsolv0 - dependency solver using a satisfiability algorithm (shared librar libsolv0-dbg - dependency solver using a satisfiability algorithm (debugging sym libsolv0-dev - dependency solver using a satisfiability algorithm (development f libsolvext0 - dependency solver using a satisfiability algorithm (extensions) libsolvext0-dbg - dependency solver using a satisfiability algorithm (extensions db libsolvext0-dev - dependency solver using a satisfiability algorithm (ext developme python-solv - dependency solver using a satisfiability algorithm (Python2 bindi python3-solv - dependency solver using a satisfiability algorithm (Python3 bindi Closes: 949611 Changes: libsolv (0.6.5-1+deb8u1) jessie-security; urgency=medium . * debian/patches: + CVE-2019-20387: Add 0001_CVE-2019-20387.patch. Resolves heap-based buffer over-read in repodata.c (Closes: #949611). Checksums-Sha1: 8bfd80577f91153f78f9da1eca5f9c892a115686 2600 libsolv_0.6.5-1+deb8u1.dsc 240f8e7c1541e135733e515e252c1d8d5bb6c93a 405816 libsolv_0.6.5.orig.tar.xz 7015aac9b072897cc02d88965b1ddeaa46f8be3d 17364 libsolv_0.6.5-1+deb8u1.debian.tar.xz 9c04a8109731a50375ac48cabb3f518972b3fa8d 58628 libsolv-doc_0.6.5-1+deb8u1_all.deb 55a045ced8bc146e0b72e9acd2df21fca580eb8b 234658 libsolv0_0.6.5-1+deb8u1_amd64.deb 6da4a8d65a7cb23848a18e38ac17d44cd62c1437 29984 libsolv0-dev_0.6.5-1+deb8u1_amd64.deb 834018b017f09c71eb57a205dfc1ec665a41f15f 106160 libsolvext0_0.6.5-1+deb8u1_amd64.deb e3fa166db48d4d8fd8780a6e09db1fff16252dc8 9666 libsolvext0-dev_0.6.5-1+deb8u1_amd64.deb 9baa7f4e78721cebeaa992daa5667f07fa167bc5 105208 libsolv-tools_0.6.5-1+deb8u1_amd64.deb 4584a67595b7cec9014e1a6eaaaa85dd5860c7ec 73782 python-solv_0.6.5-1+deb8u1_amd64.deb ec9516265ebd64eb8504e9d5bd9496fe748b95b6 73520 python3-solv_0.6.5-1+deb8u1_amd64.deb aa9c900b21ae92e8d928b27816de49a1be18d522 114342 libsolv-perl_0.6.5-1+deb8u1_amd64.deb 3b923b22bf7167ff7646480d02be9bcb3e101d96 372152 libsolv0-dbg_0.6.5-1+deb8u1_amd64.deb db3338b0e8e93fd840c93677bad699d2597dc45d 211596 libsolvext0-dbg_0.6.5-1+deb8u1_amd64.deb Checksums-Sha256: 699e6ce1c89ed57b4b540a3ba8dca338afe80060a6c07c508cbafaba5cdbd6b1 2600 libsolv_0.6.5-1+deb8u1.dsc 368b044adfd65dc05a8234b1aa483730c2740ad8cb317a901d90e5b77df9e7d7 405816 libsolv_0.6.5.orig.tar.xz 9d398679feacec39a67b808ffbc8c3598701e04bcc53d7f361c501590ec1c87e 17364 libsolv_0.6.5-1+deb8u1.debian.tar.xz e5502aa7796fa8920205412847e59e4cfd0baafccb119ed623ff3b613d46c5aa 58628 libsolv-doc_0.6.5-1+deb8u1_all.deb 2ed2f741df0168f30e3510b54a278823e8e6b9ff14e7fbf7a6632d646e091936 234658 libsolv0_0.6.5-1+deb8u1_amd64.deb c75feb69b2d0dee86361314b4c2c70ba15a7de0fcc8aacb46bf7602d5ce89bc3 29984 libsolv0-dev_0.6.5-1+deb8u1_amd64.deb cb443daf8b7aa51028d1d12008addc8b5c74e2a3fbe8a0fc110dc0bc7a53f4d5 106160 libsolvext0_0.6.5-1+deb8u1_amd64.deb c8fe8dfd875118c1e8884a535ac5e6806e8045192f4df3fb3e1e0de3c9b672b8 9666 libsolvext0-dev_0.6.5-1+deb8u1_amd64.deb 4a654c37a431afaf8b1087a9d85f46b8d7a05935bf1ee91fb51381781026c679 105208 libsolv-tools_0.6.5-1+deb8u1_amd64.deb 887d72b92f23af2a0400831cb467670b4e41e76e2c969db6755bb87e1de84043 73782 python-solv_0.6.5-1+deb8u1_amd64.deb b5407a828e1a087e1579e1ca873a7b48a11d6c2118289fa732795c507c090979 73520 python3-solv_0.6.5-1+deb8u1_amd64.deb 16fa344ab7fc45008ba48cbf7367e31231e25b25d82cc9b9fae260293602d120 114342 libsolv-perl_0.6.5-1+deb8u1_amd64.deb 82b19102bf5df196fe8640e79c6c837606cabf542b31500294ca15620ee0ab6a 372152 libsolv0-dbg_0.6.5-1+deb8u1_amd64.deb 42f400c7b20a74a341f24d0a2d1795746b2a574788cea35c593663b20b2323dd 211596 libsolvext0-dbg_0.6.5-1+deb8u1_amd64.deb Files: 23de857da38f1d062258d681e40093d6 2600 admin extra libsolv_0.6.5-1+deb8u1.dsc 04cf719c0cfbed3ba3a4c91fc6705db0 405816 admin extra libsolv_0.6.5.orig.tar.xz 84a84d601a49bc819cdfb6a91b8e51e5 17364 admin extra libsolv_0.6.5-1+deb8u1.debian.tar.xz efe959966b299a2242f81c2fea8b37c7 58628 doc extra libsolv-doc_0.6.5-1+deb8u1_all.deb 4674f2318a2c1bde8a37173e3c001312 234658 admin extra libsolv0_0.6.5-1+deb8u1_amd64.deb b6e107b48047e7758bf333aef2db6d24 29984 libdevel extra libsolv0-dev_0.6.5-1+deb8u1_amd64.deb cdc7fd106083865f81993982d29ae5ac 106160 admin extra libsolvext0_0.6.5-1+deb8u1_amd64.deb 496e702f920070f7b3d46155f30e2cf1 9666 libdevel extra libsolvext0-dev_0.6.5-1+deb8u1_amd64.deb f1b5dc33fc23fcc16e92b8264def0e0d 105208 admin extra libsolv-tools_0.6.5-1+deb8u1_amd64.deb 7818c91a111d83b42a58d1937761711b 73782 python extra python-solv_0.6.5-1+deb8u1_amd64.deb 4a31e3ff5497c741dbefc255cc063dfa 73520 python extra python3-solv_0.6.5-1+deb8u1_amd64.deb f6b6d02015cc664042a7c8342a302478 114342 perl extra libsolv-perl_0.6.5-1+deb8u1_amd64.deb 6a919cd4d8f48c325fc75746152d5daf 372152 debug extra libsolv0-dbg_0.6.5-1+deb8u1_amd64.deb 27e1f9e45e4ca40d259599944e606a73 211596 debug extra libsolvext0-dbg_0.6.5-1+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl4zSQ4VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxTKcP/As2R3aHUeNwupx4yiBLQsQf+mJd S1t1bmdB/CIKV3z0SQ4XD+zeQ6qt6VVq6hhb/0+HkHuH8MyvrgeHQvppf/RpdSDm OJWMVSWUyfx/JNCdE37BnDIVuzPg1WL8r5Ob/InwY6jmyiNyynt9y4Wd3AReFjRH VZpXNDGO5ByjL4FzZJkIvSWgj4QUp0bWm4EXMbj3Y6utaazFAUdFESctD70ZmChX KI7VXYSs11+NioNtGHEl6qGan00X+kLJO30DcrYIlbvoqvpD61zZCj64LAmZ9wMs UDLohdouIhslMFY/aBkcAftY4NxgXsFbTOtQpeus6tHbvOj1sKNELU6eSjRnwMvu VlNowTN6VxDEtleBazHtYrvfp3P6x7eoPUbkw+yfu2YtFtaqWpRv+fjbI3Nez+cs cBhMuw2CN9w9sP+HDrCcdV5qKzeRAFrP7j4xZY0i1boul1oXO/TiEvHE12LwzqiT bvOY6YqI/6KA5NBmblSzyfjROc5/IsIgOWCQrXGaaZCmFavYX+pYg9C+QgFSE3fV dZhb989Xnq6ZR8iKcby5mP7FWDmxo2yhZ6ezGQjP5OSLryzm0+1hDV6BZjmpJnU7 7YrXAELcWKGezwTkrivskNBBfb9iCLK2lIR3hS6o21RL8Tx+6Dr6SGuHhvaT+l9t NNi2tDXjsef/ECdj =ILWk -----END PGP SIGNATURE-----