-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 17 Apr 2020 03:27:05 +0530 Source: file-roller Binary: file-roller Architecture: source amd64 Version: 3.14.1-1+deb8u2 Distribution: jessie-security Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Description: file-roller - archive manager for GNOME Closes: 956638 Changes: file-roller (3.14.1-1+deb8u2) jessie-security; urgency=medium . * Non-maintainer upload by the LTS team. * libarchive: do not follow external links when extracting files. (Fixes: CVE-2020-11736) (Closes: #956638) Checksums-Sha1: 3de6424985f903e5eebd93a9fcee7d9a7c3715f3 2416 file-roller_3.14.1-1+deb8u2.dsc 8c84f967301d3a09441fdb17f5073d5244012f98 1387868 file-roller_3.14.1.orig.tar.xz 32a1915b8ecff1aea555e0b631cd9dd92eaf978b 15808 file-roller_3.14.1-1+deb8u2.debian.tar.xz db097dc6470aa8a80dcfeaf2071b88f67111423c 1090526 file-roller_3.14.1-1+deb8u2_amd64.deb Checksums-Sha256: 20f00bf33364bf87f622984dbb0b49280c7e43a17b32853f3b5f9d3cb351ff02 2416 file-roller_3.14.1-1+deb8u2.dsc 95466ce37586992e45272afa48545b041e32bc3fd37b5146399e86b46ad34566 1387868 file-roller_3.14.1.orig.tar.xz c1b8176f445c300ff48894f65de126df0661786e088e20377ec2b73886d2bea7 15808 file-roller_3.14.1-1+deb8u2.debian.tar.xz d40157c345d46d3309c83125a0ffd4152b0227f75023aa7ff328d9789c7f629e 1090526 file-roller_3.14.1-1+deb8u2_amd64.deb Files: 744e868b28da75eed11993006fe4e4cc 2416 gnome optional file-roller_3.14.1-1+deb8u2.dsc 8b2d75bdf50e27a5f63e6202ba270ce2 1387868 gnome optional file-roller_3.14.1.orig.tar.xz 743d11dad8d26c08f5f7dc062bdc1713 15808 gnome optional file-roller_3.14.1-1+deb8u2.debian.tar.xz 790392d77fdadd409eb6352f04894c62 1090526 gnome optional file-roller_3.14.1-1+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl6Y1kQTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlhb6D/wKigbA3v0LKeftm95qmS0saXBLX5pf 8FRFTglaKixm3FMysUQ9dk7x9SK4iQlKiGDLU8Ns+gb9DiTpqZeBDDMQNpXdCWkY Fzwtbl00stibqvivhYSHhZLz/oydieJdArKWwtIIWw/Nm2fVpmx6Trbn9M4fihFn jwVqW7FTnYxCwUbJOSv8Xltb9KyOpuLaXQ3fIV/HoOPfzJOfgVtHWhozHNJkTGIn p8n8kHYh8KUJd+4Ndwt9sQTs5+YqhvJEg7XluG2GvCoOw1UJy1n+FN2rMvHONTjD a5Nkb4eppiH35FJVh4Th5usTDHv9Wi5eizx2HHEO3PKhSBxpMvGLisqLOGugPJGt 1+90nkq2KvofWp/b72nPeYC3Hr5EkjBduDvexxu/xzRlfMjqifvd7xPHScVEmhLp l3qLId9NPIXT0ecPbo581Kb5nSzqT7Ji97G9Lvrx/6egf6GiC/QeNkXVBFHQgvIW E0qfiyNG0R2HiXaa3w2dVgvQkGaMYccCCxZvJZX9CsYgh5KT7YebYPKxQGgm3qHZ AFo0EBJTJvnZt1iCiuNA5030AY1cpEsoneEbI7A9HIWt6kojzqolM50qsjqtxa/1 rnYks7INE64AoPVzDBO8uc4SjcrYO5sWp62+rABRNEEax/fwT3OMKJVE6ulRJJ8Q QFM7OVrqdDU4GA== =+jSY -----END PGP SIGNATURE-----