-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Apr 2020 19:39:17 -0400 Source: file-roller Architecture: source Version: 3.36.2-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bicha <jbicha@debian.org> Closes: 956638 Changes: file-roller (3.36.2-1) unstable; urgency=medium . * New upstream release - SECURITY UPDATE: do not follow external links when extracting files + CVE-2020-11736 + Closes: #956638 * Bump debhelper-compat to 13 Checksums-Sha1: 0c337b9950f97f0fd7817ad504b8062cb17ab5af 2190 file-roller_3.36.2-1.dsc c18a7162e38a0db11c5703cb8e253da20b64ad0b 865852 file-roller_3.36.2.orig.tar.xz cdb13ef3c0c328fe20989a5b3811023e5a2d4acf 13552 file-roller_3.36.2-1.debian.tar.xz 6a315fd3b8144b727f72d519130ad8b87943bd97 18182 file-roller_3.36.2-1_source.buildinfo Checksums-Sha256: 8a416da672401c75958019bf0924f10817400dd22b6edfb741516687612698bd 2190 file-roller_3.36.2-1.dsc 268f7fdad8d2a78dfed5e82eb8710bad389c311b720666d6f07a04ed51056bd2 865852 file-roller_3.36.2.orig.tar.xz 02516bc2cd073ba2a7a2eddd1f33a67b4026699e4c0005afd5b7db55a6689862 13552 file-roller_3.36.2-1.debian.tar.xz 762e71673051fac8740c187c58031e08e08a580b4b7035df1a134e6279212810 18182 file-roller_3.36.2-1_source.buildinfo Files: 15b4e4b420d317c7c067c848ed6f97b2 2190 gnome optional file-roller_3.36.2-1.dsc caa0103ab34d237a9760fbf5e1c72bc1 865852 gnome optional file-roller_3.36.2.orig.tar.xz 9af2233a30c98134c6b416947a6c91fe 13552 gnome optional file-roller_3.36.2-1.debian.tar.xz c1604941ad82ce194c753986da7cafc5 18182 gnome optional file-roller_3.36.2-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAl6nboYACgkQ5mx3Wuv+ bH0d4A/+Ji8n3QmhDs0zdiNxoNvj1O5C3lzdqHxc8EkmgBL5TGLOyyVlHOTC7YzP vJqd+Jlvxzh1/qIJGQpCc9CHO8h4M6AgaSFkXjf3n1kjGnkc2IQ2MPwrsmXZri5M PCDf9W7cf1jNc0HOEHtegOvNcHZ6E5sOg6jFIrf25MySMWx59KAV3bc2eISHKsUQ wh9UX74Sk7qHiOOPLTsI7cYFjUw/d6Fs3UZEgOPgn86vYFfCu1jhhHVr6l1aldeG bVXCygLyofmTdGydgFMPTvtP7BKbWmn2uZ+rl/7xy0CnXOk81b9rglrgXqk449Ly ze1TsVBd1JIzbaIA6UBccIVoxgkZitGfuLfLZJ04dcyKca96nCb6xig/VVd26/hh qhsEGNmxy9pCuqgfnYCrb7qaiXmD9vZzC8un3lTdOkGMvnTXHDl171WFIgIbI4pP T+J7M3rWygZXtJgWAj/GtaKi5SZE6qh77dWYUeLn5XRqh/7npzZqHAqmQp7yLXDm zga5gUYewQ54f0lKqLVz4P4zGmuf5VJPmqtMtIgRrfm3kCUrxn2YoKOMfGNxwJSK 1clonW7H275x/SJQp8C5dZ+Md/p5FNwNf1BeS0Asb1LC0R+mxC18aJFWTLpthcNL Fe1KtEF+/lBPU+QEvm2u/lmNWbR/LtD3+/ykRLAgFiTAoQVSb24= =m7LT -----END PGP SIGNATURE-----