-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2019 16:37:10 +0100 Source: libclamunrar Architecture: source Version: 0.101.2-1 Distribution: unstable Urgency: high Maintainer: ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Changes: libclamunrar (0.101.2-1) unstable; urgency=high . * Import 0.101.2 - CVE-2019-1785 (A path-traversal write condition may occur as a result of improper input validation when scanning RAR archives) - CVE-2019-1798 (A use-after-free condition may occur as a result of improper error handling when scanning nested RAR archives) Checksums-Sha1: 23c817882e1dfa2535dfe2c31ed4c89f31e2771f 1973 libclamunrar_0.101.2-1.dsc 6f660fc27166a75b0e336b82769b242bf0471374 487968 libclamunrar_0.101.2.orig.tar.xz 7d56cecbfbae09c524177b1aa942ec228d06e0f4 6580 libclamunrar_0.101.2-1.debian.tar.xz 9a2028eb2adce97fe0f8bae51e06489f2876f1bf 5149 libclamunrar_0.101.2-1_source.buildinfo Checksums-Sha256: 040e99299b35fc7ee584d7309f1e051e27ac02737edecc4511df04443719bb17 1973 libclamunrar_0.101.2-1.dsc 754d0ac5d71e748a021e459969378eb204b9a239530903dcdfa8479df2e0b8a2 487968 libclamunrar_0.101.2.orig.tar.xz 29cbf10f875f64118b19f89b4c34cc733ceb96cf2d43dd3cb0bfd9d35225b195 6580 libclamunrar_0.101.2-1.debian.tar.xz 45816f2750f0b675d489283068dd262c6ac405fedadd72c495c6578d850107bd 5149 libclamunrar_0.101.2-1_source.buildinfo Files: 2bec6d5f2884b4118bf566c489e99d9d 1973 non-free/libs optional libclamunrar_0.101.2-1.dsc c8052a500894d5fda896fd8f2a5124b1 487968 non-free/libs optional libclamunrar_0.101.2.orig.tar.xz d83ee6f06763468e8f3550f1d5ed8caa 6580 non-free/libs optional libclamunrar_0.101.2-1.debian.tar.xz 7d06123f19182c09edb2cbdebd51454e 5149 non-free/libs optional libclamunrar_0.101.2-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQHMBAEBCgA2FiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAlyfvYIYHHNlYmFzdGlh bkBicmVha3BvaW50LmNjAAoJEAVkHxdXEvpbRHQMAI92Hb3rHkpUAMU5gnwtgYa/ BCPHdWgHwgYfOyRC4pdRPGNNAiRcWHWZL0q3gaTj65mS4bwFMRGIIgl6C9r8PFIG ZfQPnaXvL5Q9oN03pwRUjzZBsR52gzBzzISwZR4Vm7zESNO9E+bCc8akel3IcPVp nmyPnq9A4NyhaL8VYdw1WuE+kgOzP9cAGzCHsHkszY7s3j/Y1qSs5rcxMLK4jQkh O7JnZhWxR4Rcf6HTduANSUofFHpJlZlT+FmUOKrMsch6j/fJHYflabQE0k3ckM5/ z/v59obHvOJe8QJvUmcNQuMhE14W3qu/EBvWNYPP6mMk71sMPa3pvCjhkvJ6UYrr U5pqJAzEvMPKP7XhAYGzRap+xoHWh3LuCDiawm0TiUbHtU+8qKY1pNQ/Nh24DhIT 0gnQSc4gisx0xYHlmpqNxhywcWlsVgYfpiwiktGplkA4wVjBVRRmtGp7GrkGumGO kfcXyV6mEJyaLHF8Efbbngl0vF9df4Au+GVCJ8WIKg== =CYOd -----END PGP SIGNATURE-----