-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Sep 2019 19:00:21 +0000 Source: dino-im Architecture: source Version: 0.0.git20181129-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org> Changed-By: W. Martin Borgert <debacle@debian.org> Changes: dino-im (0.0.git20181129-1+deb10u1) buster-security; urgency=high . * Fix check of source of a carbons message (CVE-2019-16235) * Check roster push authorization (CVE-2019-16236) * Fix check of source of MAM message (CVE-2019-16237) Checksums-Sha1: 2e6381ae8abebce25c891e1e0eded340b8f11305 2323 dino-im_0.0.git20181129-1+deb10u1.dsc fd497c2d4372291b3b1768d2138651c35238cd8d 335992 dino-im_0.0.git20181129.orig.tar.gz 925f8449b7fc5b1425be0c945175d16f9d822365 6052 dino-im_0.0.git20181129-1+deb10u1.debian.tar.xz Checksums-Sha256: c6db3448cb5b00f2e78c87fab1427a589d12ce9966057d92586c2724d7eabfe3 2323 dino-im_0.0.git20181129-1+deb10u1.dsc 57d6f4c89e0eca8aa471f3b9b877c7d6c3e7f80072f66a6d0394e1c4a1bd8907 335992 dino-im_0.0.git20181129.orig.tar.gz 0364b82bd4f39986e30a06a3814e004e147c2ec074413090a49e9f0657b490f0 6052 dino-im_0.0.git20181129-1+deb10u1.debian.tar.xz Files: 7e22e51a6546d80ca727ecf908e25b78 2323 net optional dino-im_0.0.git20181129-1+deb10u1.dsc f9df6c923b799054ed17ea5e474e1403 335992 net optional dino-im_0.0.git20181129.orig.tar.gz d741df4e3ff9075333c54ce42a27caa5 6052 net optional dino-im_0.0.git20181129-1+deb10u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEftHeo0XZoKEY1KdA4+Chwoa5Y+oFAl1+WOwACgkQ4+Chwoa5 Y+p2Yw/8C7iRcoLw4AxYJzzVkNIg4YFKGDECoaTjZsAUQioOaaLWwPj7gzE4485k UC6ESbO5C38bX6rtW56d+uOIO8DDolN6nrLJeqhXLN54pm33q53zsf+073ghupNH d3VQM3dRu38kGoRfvC1VaC4rZkwU8dazBSs/tTu6Q8tYCYGnbCA9vNDXdl/c2kWA VP+yyuKWNjRa1RZZ6IGoVdqAoJ43BpBQohHeSp5OGS/M+5RXgWtAPXP8TujApfy4 pAabQjTNYamP4OJwy1Y85aZ/7eAKvKIiKRlRoaWvJ2iXPsXuBzKEsDGN423MaVwP rHes/WnoZ/hMG34zQ6BRdShWiDlwJ+ncVSOclwARyvRbLvRhwg48ZY/Xc7cgCmzf x6VcBNzBZnSCfeRyvblUATpEPGKbWkR82NmiWgcbQnK13MiLbhx33Wim7gNktqvd d3qsedxARLe0DKzkeqJcCOB0/2W9Q6x2unt9i+S3gRi3LMI+sIYpg7gTYRNUfPON 8J2JmEO6Y4AgX5HH22179JkhaJIhW3i3LIiENeG1Ff+FF6iR2kQLTnNXzhw4hD/e w/efDlFuemswhHuLKq9f7e1crzS2TkWaCtZ6NW6NrAPbBuRmjZkhMos7fj1Ldg/r KW+/8sHMXZr++Kwvn9QanOmjd8USBW8LhTH2uW5MUhksRxy/Agw= =2Zy8 -----END PGP SIGNATURE-----
