-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Apr 2020 16:03:02 +0200 Source: rzip Binary: rzip Architecture: source amd64 Version: 2.1-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian QA Group <packages@qa.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: rzip - compression program for large files Changes: rzip (2.1-2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2017-8364 Fix heap buffer overflow write by allocating a large enough buffer. Patch taken from openSUSE. Checksums-Sha1: e1100051b0156fecab3c12a7defbcc0c4c5af840 1859 rzip_2.1-2+deb8u1.dsc efeafc7a5bdd7daa0cea8d797ff21aa28bdfc8d9 46785 rzip_2.1.orig.tar.gz 612fded7dfc090ba8a9ecb9510bafbd46be3f008 7152 rzip_2.1-2+deb8u1.debian.tar.xz 720425cacff0bda121f7225b77cff02c30dba45d 17236 rzip_2.1-2+deb8u1_amd64.deb Checksums-Sha256: 73dbcf5bda0c935d47b880cab4061beaaaca07e8c8e33f767b6eccb0bddd6704 1859 rzip_2.1-2+deb8u1.dsc 4bb96f4d58ccf16749ed3f836957ce97dbcff3e3ee5fd50266229a48f89815b7 46785 rzip_2.1.orig.tar.gz e6b744a2799d5ca3ead4d2639f1ad86dcef99409adc36fd297d4fe3a5599ac73 7152 rzip_2.1-2+deb8u1.debian.tar.xz ac8b550825869506d9381661270b419ca5811d35a34d7a7411492ff1a4e6ca87 17236 rzip_2.1-2+deb8u1_amd64.deb Files: 08529e594e3c74cf0b05eb2dbdecc22f 1859 utils optional rzip_2.1-2+deb8u1.dsc 0a3ba55085661647c12f2b014c51c406 46785 utils optional rzip_2.1.orig.tar.gz 5bca176cb806f3e6e16a90374e4eb3ee 7152 utils optional rzip_2.1-2+deb8u1.debian.tar.xz d6a080d7f37578b5e7effa7aacb6d770 17236 utils optional rzip_2.1-2+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl6lmQNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR+TPD/9+eeeSd51jJ4NG4Mm3EA4bao4VL/4G XRemN1eZbgJOpJWsbEYeP6KiNcxrWUsPSg+fNa7Sac5S6m96+vq3D6hrQSMQrVRj I0bwpz54gaO72iCCXIH2AGMvHk/oUVWg97yGWIbMJsPUiSxt1K2QN1uU7ZLpI8Su r0gRiWv3zUqT67KwMwithLUL96Y8TsoMeQX9uczBWDUAoLC1whJOPdV1zqh876w4 9en55hgx7HjWCW2dLfuEwq1Ty9msqm0MWFH+MPoF+v0W8oCAnR3s+uVtpBIJ0pIf mu7DEpBKv6lTsXVidfuXAw17/8JpAy8ek2I/4J+AYZz2QVeIGq4MFlv4MGdM1rfc InG18e+hj04Hl3PFMsUzaN2/TVZQcYC2/B/96cwUPbDuUt660lwOlIDt11Z+jDCi /TRzMA7U1sW3bpziguK20cD19swmkhlt+8elrQKooKL1+c/w558YiTtuKH0y4mpL i4OMUK0uGUKPdhfl9Ht7VObX60YfPd5eIryzgUty5ooLnQ6lWzSABxoZn1SrBjEa gVqSyG0QzW/NW5fgqvKyY5mQsbdDSve64aOIEv+oCvtI30ba9w69RaPdbQKru40y 056P32PyR1v62qLIAC9qdYfh/LeRitIp7copa5UaVE8mklYiAKqkH+omRh5ir4Jh ND4VklOje5hGzQ== =xdlP -----END PGP SIGNATURE-----