-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Oct 2020 14:16:11 -0400 Source: packagekit Binary: packagekit packagekit-tools packagekit-docs libpackagekit-glib2-18 libpackagekit-glib2-dev gir1.2-packagekitglib-1.0 packagekit-gtk3-module gstreamer1.0-packagekit packagekit-command-not-found Architecture: source Version: 1.1.5-2+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Matthias Klumpp <mak@debian.org> Changed-By: Roberto C. Sánchez <roberto@debian.org> Description: gir1.2-packagekitglib-1.0 - GObject introspection data for the PackageKit GLib library gstreamer1.0-packagekit - GStreamer plugin to install codecs using PackageKit libpackagekit-glib2-18 - Library for accessing PackageKit using GLib libpackagekit-glib2-dev - Library for accessing PackageKit using GLib (development files) packagekit - Provides a package management service packagekit-command-not-found - Offer to install missing programs automatically packagekit-docs - Documentation for PackageKit packagekit-gtk3-module - Install fonts automatically using PackageKit packagekit-tools - Provides PackageKit command-line tools Changes: packagekit (1.1.5-2+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2020-16121: PackageKit incorrectly handled certain methods. A local local attacker could use this issue to learn the MIME type of any file on the system. * Fix CVE-2020-16122: PackageKit incorrectly handled local deb packages. A local user could possibly use this issue to install untrusted packages, contrary to expectations. Checksums-Sha1: 2dfcaaddff46ee1dc84c6a5cdc901883b4de4b98 3130 packagekit_1.1.5-2+deb9u2.dsc b7805e8ddd6cee697575afe0931f10ab2e09aed0 1418292 packagekit_1.1.5.orig.tar.xz f2e48222e510f6ae088f6661081fd58061480891 24212 packagekit_1.1.5-2+deb9u2.debian.tar.xz fef096216f272eb62d65f040be01e1e4603177bb 22657 packagekit_1.1.5-2+deb9u2_amd64.buildinfo Checksums-Sha256: 3932e4f50c3fbe6ea01445d8c3874a2435e19a112d1fb00ce472f9a8868d0baf 3130 packagekit_1.1.5-2+deb9u2.dsc 50f448ced5b460bd79ba0c97e9fe080153eaeecad909eee108284e3f5fc7b70c 1418292 packagekit_1.1.5.orig.tar.xz 91ffed2a5179459bac30d5a3679a9fa92b68de92b43f9489dab2cb01f24eb1d0 24212 packagekit_1.1.5-2+deb9u2.debian.tar.xz 0b9af0e944e634af054c0b7cbe7f338d2ba85bc80fbbf041e10fa47425b6d110 22657 packagekit_1.1.5-2+deb9u2_amd64.buildinfo Files: 49dc38967c779622cdf0172d278d7efd 3130 admin optional packagekit_1.1.5-2+deb9u2.dsc 5777afc107bab4ed55efb5e1bc312630 1418292 admin optional packagekit_1.1.5.orig.tar.xz 48080713c418c2ebc9f33f2c1e4c02c5 24212 admin optional packagekit_1.1.5-2+deb9u2.debian.tar.xz ccc39bc151fb685d650e5a04d01f2268 22657 admin optional packagekit_1.1.5-2+deb9u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAl9+CLsACgkQLNd4Xt2n sg+loQ//bdPmmEFyFUGR64Ak+wTx6H99AX7I6FgjHOCXAJLLb3ebvLfbcTP5H5dh kkbF20RKWl2pXqbmPGMsu9GZxsMpUEzILGa1IgaaNqQ1krCiqRfyBROCSFpdJKj9 SH2vxJLq7nRRhqdinM3ZJMU14mW/un7lYLTeIalQbUmTIamBKiv4SSGCwUgvRpg2 M2uc44So/6QpQwV4gkT53yyGbnAC55FnNq3Y4+ZGUewHxlWguL25Uy23YK5W3clR eYpHmi08gDn4JjstOmzFM5QW+EnxRTBs9Ec2FWjwgNyszd919d4QCD3j7xCPqUQ+ 9bveUOguPYp8lvLw7d0Kw9LmhAlIJw8q2/qWTMgH899Zti/kiiUtktIt6zbM9gkK IhgzHMIrNesRkKF0MbHq5HjfyijLihQOJaE1YUi/9kEdpWtLyghDlCJKihj6ZyAh TUe9d+j2SUZJ2LU525aMlgo9UtkTHIm4E5Ecoi/55wqb1MNpGiqRl1YidYuwNOni Dpi/ldk7ZbuuAQ8sy812NHmR7w/BTulvHuou/FN/wRlgPuHpOmNGaD3GB23YdAjx RAZPgVq/AazIxEjFBAs5BC72m8A2h3EDE6j16PJs+MtpVmVZDGH6MzE9Q36nicpD bxqggIE32DEnfAs7vq3JhVQxUqWhDa1Wtia4C+i0MMiKaeVJXiw= =0dxN -----END PGP SIGNATURE-----
