-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 Mar 2019 14:12:49 -0600 Source: edk2 Architecture: source Version: 0~20161202.7bbe0b3e-1+deb9u1 Distribution: stretch Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: dann frazier <dannf@debian.org> Closes: 924615 Changes: edk2 (0~20161202.7bbe0b3e-1+deb9u1) stretch; urgency=medium . * Security fixes (Closes: #924615): - Fix buffer overflow in BlockIo service (CVE-2018-12180) - DNS: Check received packet size before using (CVE-2018-12178) - Fix stack overflow with corrupted BMP (CVE-2018-12181) Checksums-Sha1: 050c109167f14753afc21c6ba1b0f4d82752d473 2236 edk2_0~20161202.7bbe0b3e-1+deb9u1.dsc 97c6a851ea2871ffe86941c96e94ca1b32fb6f8c 19416 edk2_0~20161202.7bbe0b3e-1+deb9u1.debian.tar.xz 2be4cffc732e5d4b2deb7f8464ca494999c7a9db 6893 edk2_0~20161202.7bbe0b3e-1+deb9u1_source.buildinfo Checksums-Sha256: 1544ddd2458f18c4ec1ea10b1b14486e7fc63a7a1f68ee9a36e305740ffe8538 2236 edk2_0~20161202.7bbe0b3e-1+deb9u1.dsc a22d96e51f623eb06ea9b3480d2771cafb46860d0affc4a8753b851480d285c3 19416 edk2_0~20161202.7bbe0b3e-1+deb9u1.debian.tar.xz 70152a5a517c7f72347efebea2fe11f5d741060dc6a77883c0e0018e06c17d66 6893 edk2_0~20161202.7bbe0b3e-1+deb9u1_source.buildinfo Files: 9fe04f9aa7af1ab55e748791b0a29305 2236 misc extra edk2_0~20161202.7bbe0b3e-1+deb9u1.dsc 6da741b84b6dee99605e64b1f76d5356 19416 misc extra edk2_0~20161202.7bbe0b3e-1+deb9u1.debian.tar.xz ecd89822da1bdaec149b3697f78ad55f 6893 misc extra edk2_0~20161202.7bbe0b3e-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEECfR9vy0y7twkQ+vuG/g8XlT8hkAFAlyP/dYRHGRhbm5mQGRl Ymlhbi5vcmcACgkQG/g8XlT8hkDEuw/+LKqzcfXg3PHHKmaBq1/8qNuaX4x6qLhO EOQP3l++8R89Iol8BW0wMzMg12rU27cI8+yIwcwRwpGj08HeJCQ7npTTbfq8ufSJ J0+D5FITYFYM8Y1FqUiSf3ytY9tCloN/3bAd4w7RuqDe1VLc+pDXhpYMoSj/1deN cK+H6pqfyCzSAqqdqQ+ORPSwl7UoL5d4gGr/eVFgvGgQMWqW3J3dlCFBUI9uH+jL J3XW/1YwCqXBbyPsGlOzb6qwn0mdwTGLXgIH0K6+h6kEeJM9rMG97wgUVeWvnP78 UA6krf+mST5NpKW2pQcfbUUa5Ft4g59O3n1BNZ7vFFFKs5DfAA3W6KI27Rx3Q2wE WD05yCZQHkHhR0ZbqkkBF/Bw3pS0/zLOq8ozxtfAni40l95VbH5Ul2jlvebB2cN4 akx4VjFgkXa05gfwEo7iQ4+rVQ2AvTMZyKfs6Tn+K/cAAgVyDnzdenTSgeRxCreE uSiCiuEeomd5FKaIoOY0LHuNNa/VyJstP9diNTxdb11kV1ntwLop8t2+Z1OY3yIf IZTcJKAbeloTvnmqG6muZ8d3BO7bPIy63f9i65I/9W82ucuxUW7xL5ilwta0klbE lFTfEBuEdw6xwyDiESBGfxo1xXzXBc5/m97knjERgF4V+4xrRJKVoWqE0IW7CBkQ B3+jpzCw6+E= =4GnY -----END PGP SIGNATURE-----