-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Apr 2019 11:32:02 +0200 Source: libqb Architecture: source Version: 1.0.4-1 Distribution: unstable Urgency: high Maintainer: Debian HA Maintainers <debian-ha-maintainers@lists.alioth.debian.org> Changed-By: Ferenc Wágner <wferi@debian.org> Closes: 902104 927159 Changes: libqb (1.0.4-1) unstable; urgency=high . * [021333b] New patch: Reduce stress test lengths to help weak buildds (Closes: #902104) * [dc825fb] New upstream security release (1.0.4) Libqb creates files in world-writable directories (/dev/shm, /tmp) with rather predictable file names. Also O_EXCL flag is not used when opening the files. This could be exploited by a local attacker to overwrite privileged system files. (CVE not assigned yet. Closes: #927159) * [e36e34a] Refresh our patches * [0823bf1] Acknowledge new internal symbol * [88aafa5] Update Standards-Version to 4.3.0 (no changes required) * [174d210] New patch: Fix garbled Doxygen markup Checksums-Sha1: 710f93c4bac969ce0ae0796ddb484637e016e3ef 2423 libqb_1.0.4-1.dsc b8078893be6c2c355313fe71cf006da7713ea43e 488536 libqb_1.0.4.orig.tar.xz a0c36c968b98ff62fb2e08d1676068f074bc22da 490 libqb_1.0.4.orig.tar.xz.asc 597140cbb986bae40feabd146485cac13b732061 14660 libqb_1.0.4-1.debian.tar.xz 7ad39ccc76987a16c2557887a4ef38d59fd17c74 8994 libqb_1.0.4-1_amd64.buildinfo Checksums-Sha256: f6baa06c325116c25dfb6e268b1f26c4c0cbe1440c5466e8bb15aa31a5f4d291 2423 libqb_1.0.4-1.dsc 0064575151b11135a68a15f01da0ab1eaef4279b07e7059a10c748c12f28c14f 488536 libqb_1.0.4.orig.tar.xz 10029fa1da3752b9c28ac2a7530108671a084fa80f37c5b211aeec2de74744ae 490 libqb_1.0.4.orig.tar.xz.asc 23c9517fb3f746f50ce7bd99deb48d03ab88521ba1801ceeb2a501dd54311fae 14660 libqb_1.0.4-1.debian.tar.xz 4c61f83a9a0fa365561fb7ddd2300f5ed09cf1dcef1fa763eba658b46d40c69a 8994 libqb_1.0.4-1_amd64.buildinfo Files: 254a63658735dcb207be357b4c2b3e6c 2423 libs optional libqb_1.0.4-1.dsc 07dc93433a295f45dd16293a4b63389e 488536 libs optional libqb_1.0.4.orig.tar.xz 22d567fc789da092b0e14e1c9d625ac5 490 libs optional libqb_1.0.4.orig.tar.xz.asc 61a49b2f90a1bbe677275238cd107213 14660 libs optional libqb_1.0.4-1.debian.tar.xz 3d70e4dc9e8d7c4d71204c670a3e11c5 8994 libs optional libqb_1.0.4-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEwddEx0RNIUL7eugtOsj3Fkd+2yMFAly1pF0ACgkQOsj3Fkd+ 2yM2Bw/2JzHPYzWM71U7xw9/rYefEfzigmRTofej16IQtx4dGEmGs5wy2lkDrY/Y lmho1aPv8dpV46Xz4oTGhi9n1L02b9hD3eVJ0CsJ6YCFQaBJ9CcXPM+TQSLCjYN8 syGl/jqKknAfRNJG50NnQUXnACHmgJ79CVaXyiZh132V28kOYJBgGJi0ayqznd9r G8eHoYYdmk0zV+SdaQ6fTeg8pitu6QWLHQ73qfVlaLO+uCeRZUgJl8Ah9raHPqgi DA7OPoPWdlsrQc0kRKI3vQ0KMkphjzsymy+TsXD0zomXp7X6tJ97rx1q3yylO528 lX86UNll+aY84dejFu+LxJG7UBFW1ADlgd830qEUVR0SbL97pVKZCwwJ4k/Z9zN0 I7c3wFAwUJF/XkIc3serOjUjj3AB7XvKuQWXNHbaN6e2IurtrRrn3SRKrp9WX5l7 /5uyaan3cZ1mugphn1cSStyw2+nqOPp5SyeqTRkhL1LkTISpvmm24/QQGOvGrv2z vPgy7OC1AwQroagp0DjwCSLyPWdJm7Svaic4WmzNaYmUF/PmytW4sdNboCC1ZAGK cNhrisnYd8yLH+geGKIfhrXOXJ7ivcoufFHpBROnoazhVtF+gGOm5k4HqYaPOVb5 3PklhlTgilvG/9wY3662YIHWQIKFd+gPth/dfKjfexoHNJl94Q== =NWod -----END PGP SIGNATURE-----
