-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 28 Jul 2019 16:07:29 +0200 Source: unzip Binary: unzip Architecture: source amd64 Version: 6.0-16+deb8u5 Distribution: jessie-security Urgency: high Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Markus Koschany <apo@debian.org> Description: unzip - De-archiver for .zip files Closes: 932404 Changes: unzip (6.0-16+deb8u5) jessie-security; urgency=high . * Non-maintainer upload by the LTS team. * There is a zip-like file in the Firefox distribution, omni.ja, which is a zip container with the central directory placed at the start of the file instead of after the local entries as required by the zip standard. This update now permits such containers to not raise a zip bomb alert, where in fact there are no overlaps. (Closes: #932404) Checksums-Sha1: 13e82254d642c2dab5155e284353e4ac52bbd063 1850 unzip_6.0-16+deb8u5.dsc d61ae2e5ab400bcec8097c014a4764645332b842 21024 unzip_6.0-16+deb8u5.debian.tar.xz 1cbab0b5bfdb0b6a32cbcc4bbb5094b63f1e80a0 164124 unzip_6.0-16+deb8u5_amd64.deb Checksums-Sha256: c2c5301a102b42ce4ea6cfac1818acef2ea96111f043fed0718619ec2cc07201 1850 unzip_6.0-16+deb8u5.dsc 399f7797b26090f57710f081e1baf948b806089e01468448a6546f8471f823a5 21024 unzip_6.0-16+deb8u5.debian.tar.xz 6bb1bb383aab2f1a3639e6080131d7fd9f4d44b32cca04d28e0de368b2cd2e3c 164124 unzip_6.0-16+deb8u5_amd64.deb Files: 07375c34a6561f94492b57a87e8314aa 1850 utils optional unzip_6.0-16+deb8u5.dsc f51846430dc924e5279a31438630b41a 21024 utils optional unzip_6.0-16+deb8u5.debian.tar.xz 7e776aa56613a3dbe87102a321b52b95 164124 utils optional unzip_6.0-16+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl0+GodfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HknGIP/0MANSmWHL67OccmvBj4XsXvkOhtYThIcVVX /jeEiHbvBeOTkhd+hMJy6oUpuyKDYfr4I6G3qVesQ5vp+oLW5PQOhQM+0O5h7ETX Y3jSlyWLLVPJG4xnI/muYls3udiXxqQrVIfA6W+cKEzYoks38Hd3Q39/u/t87Org uw2xxwmQrwEu3QPG4Vdy5+lSANV9rtXlmPSWzCeyPKk2qu0isLKupc18B9ifs7Qp MstKJP/7ydOsHe2QwPcYw1OOZMt6cIzJ93yJtPgPbrza67/SndDg3L/BXlntX5cs BkPBwDoXE0vQ77BMnxjdPHI3ZjVZB19TblvZ/kveuGXu6AdIf1gMhwr7QxRF6rL6 adSCAWJeCrXWf0I80cCg+aP6Ikv3T3sWdYBxS3XpMiOq8SgZXVff2N5P+xhkRMWQ 1gELurRdH/PP+3cD3H5YAGH/yHfgbNfcjsmaD20S6sTwbgbD15OQv4AmH3WrDuFc UHoP2jfNtWNVZhQnecgEZ8ebIN5aDKxM75E7n/iOBBgh0jIc4BGmPnSHtg79OuOo DQnwSlrhB9wd5jKEL3BIQIY50DW1KVVtDRCcaDqV5J7K6/7SIg3X6s4lEimxpRx1 ZZ7AoMQFgReQ6NfAAZK7dv+X8HQUd+RCQ78tgQQE3tPIu4VrqZCbRkSbrvctEcKk Owa/zTxT =CAv+ -----END PGP SIGNATURE-----
