-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 01 Aug 2020 21:49:56 +0530 Source: transmission Binary: transmission transmission-common transmission-cli transmission-gtk transmission-qt transmission-daemon Architecture: source amd64 all Version: 2.92-2+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Sandro Tosi <morph@debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Description: transmission - lightweight BitTorrent client transmission-cli - lightweight BitTorrent client (command line programs) transmission-common - lightweight BitTorrent client (common files) transmission-daemon - lightweight BitTorrent client (daemon) transmission-gtk - lightweight BitTorrent client (GTK+ interface) transmission-qt - lightweight BitTorrent client (Qt interface) Closes: 961461 Changes: transmission (2.92-2+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * Add patch to fix CVE-2018-10756 (Closes: #961461): Using a crafted torrent file could cause a use-after-free, which might result in a denial of service (crash) or possible execution of arbitrary code. Checksums-Sha1: afee92b60d09d1a4ad071baa52bde50fb9cbf0f2 2679 transmission_2.92-2+deb9u2.dsc a35ce65bccac43cc75a5c3965a426aae5e3f056a 6100037 transmission_2.92.orig.tar.gz 029ae0708ea5903814cc8ec9b758b2ebfd925b66 25408 transmission_2.92-2+deb9u2.debian.tar.xz ad23a8c3e475f30606054bfd59d9b7a9a308f738 4938622 transmission-cli-dbgsym_2.92-2+deb9u2_amd64.deb 4b859544d94997828784ddc75abb50678eb97ffc 404064 transmission-cli_2.92-2+deb9u2_amd64.deb c4672d4d5ac455da8f1a63566622686957a4cc70 287644 transmission-common_2.92-2+deb9u2_all.deb 54a54d59259d537310406e4600a68c845e6f2684 1003928 transmission-daemon-dbgsym_2.92-2+deb9u2_amd64.deb 7f559d8956388532a5595d3ef175ba5b97267d49 218756 transmission-daemon_2.92-2+deb9u2_amd64.deb 35b160782977cfa773040c3764a37c16b111239e 1584694 transmission-gtk-dbgsym_2.92-2+deb9u2_amd64.deb 111098bddd21421237a66f3f16a1262b9bfa56a5 701118 transmission-gtk_2.92-2+deb9u2_amd64.deb f9b8dcef4d45709a5898b6149e4c2dc62ad0f96a 10416858 transmission-qt-dbgsym_2.92-2+deb9u2_amd64.deb fec3d2bd6051314cef44bb02e19cfa2413cbe75e 663546 transmission-qt_2.92-2+deb9u2_amd64.deb d889c8bb14318a8923a58916f031209185c019e4 1156 transmission_2.92-2+deb9u2_all.deb dc48f8ac9485f287533b7168dc4a7c1c56a2f900 19420 transmission_2.92-2+deb9u2_amd64.buildinfo Checksums-Sha256: fe21a8a73c264d24e76f158b10317981bb60041cb576240a5dcf3cdecca204c4 2679 transmission_2.92-2+deb9u2.dsc 92dc12f8114a36349a0072731bec381c591dd21fb2b5ba1b558fae5cbbef104a 6100037 transmission_2.92.orig.tar.gz 293705dd25901b9bb14725a94b2929b807fa934048f05017acbabc4d9b4f68e0 25408 transmission_2.92-2+deb9u2.debian.tar.xz b28bf99bc082062ef05d85313d1e04587ff3920ee17cef2932b5f09af156ad56 4938622 transmission-cli-dbgsym_2.92-2+deb9u2_amd64.deb fff9214c27197c0c7287ac178b61a7fa0581335bc74abab52d8a9b4fba7ffe8f 404064 transmission-cli_2.92-2+deb9u2_amd64.deb 4ec77ee78eb714ec85bbd03e38c3efc5185d3fdc3e2fa338deda8c21097cf3b0 287644 transmission-common_2.92-2+deb9u2_all.deb 387641d73917e9a59589d236bf0f3891cd4786e8977cb1fda77ae481ea16ebdc 1003928 transmission-daemon-dbgsym_2.92-2+deb9u2_amd64.deb b2bfc82a37fe49d6f257b44ba0c7594ee48ea35a2e1afa2e3fb58e2c9401bd94 218756 transmission-daemon_2.92-2+deb9u2_amd64.deb 367fd62e9600e2baa95600b7618496c39b2966b85513e13b85e1986f5062cec9 1584694 transmission-gtk-dbgsym_2.92-2+deb9u2_amd64.deb ded4cda5836e140181171c03629008f2154aa8ba00773fcfae37b1a89a94bc56 701118 transmission-gtk_2.92-2+deb9u2_amd64.deb c448c37103c26060e782b1821e87e8e929cbd90732d34f73461ba3f8d8926e79 10416858 transmission-qt-dbgsym_2.92-2+deb9u2_amd64.deb 2ddcfa901fc830da538b68e7b61f4c3642e8518b1babdda26924e7a9491fb89a 663546 transmission-qt_2.92-2+deb9u2_amd64.deb 1f7540a6ac2e4f084d8bc93a23438f5153d59715ce61378d6fc5e3fe86958a0f 1156 transmission_2.92-2+deb9u2_all.deb c85957002e23264bc19a90cdc06882f4ee19d94bee272df56d8aab833cb32ad6 19420 transmission_2.92-2+deb9u2_amd64.buildinfo Files: 9ba939fd4afbb83842450ebcd6d79314 2679 net optional transmission_2.92-2+deb9u2.dsc 8d36460fef2ad77b075d7e2444d5169a 6100037 net optional transmission_2.92.orig.tar.gz 53245e0bda84069fb56393675b59e597 25408 net optional transmission_2.92-2+deb9u2.debian.tar.xz bd6e171fd12114b0b53cd2472b86927a 4938622 debug extra transmission-cli-dbgsym_2.92-2+deb9u2_amd64.deb 5ac7d1281be6d57ee01ebb0f63349b47 404064 net optional transmission-cli_2.92-2+deb9u2_amd64.deb 821c141f96915b244fc1ddb642db0630 287644 net optional transmission-common_2.92-2+deb9u2_all.deb 796eb445825881a78833e8829adaa005 1003928 debug extra transmission-daemon-dbgsym_2.92-2+deb9u2_amd64.deb 4e61c4be5af48c5713e76e4bc544ab1d 218756 net optional transmission-daemon_2.92-2+deb9u2_amd64.deb 6fd4f2d8ae889795ce561f52416e076a 1584694 debug extra transmission-gtk-dbgsym_2.92-2+deb9u2_amd64.deb a3dffadfc928cfb334457662b1b9a81f 701118 net optional transmission-gtk_2.92-2+deb9u2_amd64.deb 9bed754f6e8b96992eb7c1e2364fe5f1 10416858 debug extra transmission-qt-dbgsym_2.92-2+deb9u2_amd64.deb cff2bf6661c55fee00dda47ffc8450ee 663546 net optional transmission-qt_2.92-2+deb9u2_amd64.deb 8350c4ab91677ee73c6fdecf14ccb907 1156 net optional transmission_2.92-2+deb9u2_all.deb 944b3be8db819566196632297521bdf8 19420 net optional transmission_2.92-2+deb9u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAl8lmHkTHHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLljqFD/41pXhmpYqiWdPcxNqpczTSwG3HBKXm U0rYxn9OdGXu89VN2AbgAXcccrxrd5RUDgyUoQctDcg1PExAyXaDrVfjq9dTear6 qMd0UyDqRWyHslMunO6ujnW3ir/ZvnM9zfFMEvm6lUBjoeFqsIova7nq7MNkoZQM qD0OuNhlfJrO1sJsz0KkETxyGw7jqUZJh1UrztgrNfkt50mS9egL51yaY2oQAHvF zZUp3i98p5Yc3nl6T2ar0ZN6xDeLwBdB08J3PgNN0P3o8VlxMLOjSdhy3kuzvcrw MBekiyeaCLytE7vNVv0V2LuKf/nzQGBNec0tc0i4dKQF4pfUICmeziwOX/6SFHCY 4iGrWJg89jyRPcAMRKsH526gWSEix8+LiaAeEd0zllwABrkZj7KDOgEIl6v5mZE5 2DQd3jyuGpB7iLNdxlVFnpGW8jIvZSQsYh/hV/2kXi6fdyAErQXtB6h/Sc4TyVVf TEuGvQGeEGutB4YctpTE5IjjUGmPALkPOCPjE8y1mc1BGSTVCIQgE/ArBNY1Xzqh VGaaj/jY+dU3h10fHAl2AEH3rZ9zskZDZhAyA9bKYA7vqYJaeF3ZL+0JLlvEoUJZ TuuPyfSvuPKUtnOQyXdBv9fmUIR7AjKEekj79YoglJyWnXDg5OuuOoVGjeTXNsQ2 L+atHbJWtbq5ug== =Vw7t -----END PGP SIGNATURE-----