-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 07 Dec 2020 12:31:04 +0100 Source: apt Architecture: source Version: 1.8.2.2 Distribution: buster-security Urgency: high Maintainer: APT Development Team <deity@lists.debian.org> Changed-By: Julian Andres Klode <jak@debian.org> Changes: apt (1.8.2.2) buster-security; urgency=high . * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) - apt-pkg/contrib/arfile.cc: add extra checks. - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB - test/*: add tests. - CVE-2020-27350 * Additional hardening: - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB * Fix autopkgtest regression in 1.8.2.1 security update Checksums-Sha1: 489b82699ccedb79f7ea99c97d5b99ff0e3fc999 2774 apt_1.8.2.2.dsc e57b606d801faf825d31ea4034a66d1c89eac5f2 2191728 apt_1.8.2.2.tar.xz 8e9fb4d93f807423779b069d94222a0abec5c3f3 7400 apt_1.8.2.2_source.buildinfo Checksums-Sha256: fb213748b5b829f68b7f6c8d83ad72a21990d0f194b6e6f950509b6b05346f58 2774 apt_1.8.2.2.dsc f5030de22a5cc80db6fe0d42373b5df25d7dc56e94d9155f2eaa80dbd65e82fa 2191728 apt_1.8.2.2.tar.xz 5348891cd79a868da38096f63b2df8d548930c6cb41049b0ca0388179e658cc5 7400 apt_1.8.2.2_source.buildinfo Files: 0ba8007ffc8cf93a3a744599b91adcdf 2774 admin important apt_1.8.2.2.dsc f60164a3f3e1d52521db5a84f55f8ce7 2191728 admin important apt_1.8.2.2.tar.xz b859a69de4b5192e28cca5fff8bd6c75 7400 admin important apt_1.8.2.2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJDBAEBCgAtFiEET7WIqEwt3nmnTHeHb6RY3R2wP3EFAl/OK38PHGpha0BkZWJp YW4ub3JnAAoJEG+kWN0dsD9xj+YP/jt88Jz/hK9KxCaDP1CuqCC7PR/fWdv3Kd7F AIjh8JmBC8+CUj/nkDmcNF2Qu3klyuy8vU3UzK633FI41vM1smi9lK0B/9Xm9mfe ob3OsbwkwmN6CzfGY2wCaUitiuYEZJHv0MG5GBU67vqUiOuVZSa9p+avO7Mpi+El voGYzAgakm7H+j8Y5lfMZNnNjcYs3PevGpbkd4nhf5TebfLpLMj1AeoQx3yzYPEM pKJMFOtF5UWqxk6sNdZvnKl59TXpspaVrQkUvXK2eQp5bW8CuNGMfiAdt1sb5wuR xfqdiYsRjVDbKkIfEwcevcB8RSNy4jYWFG4QLShDMBKCob6nAdHTSRKicxkfW8OA YNYfR8KJtwfwkMQSQaP97FWWW43sdJEE28Tdf93rDkSSjmCCWU8doZ8KDo9l+uov y2Xvlo5NihbgAp56xxIOVu8oCPx1Sh5Zc0uimih/BZL4JAGnEpY8hMSJToh3yGLN MMemAHdf2dIlSUeYkSGT2Abx3bqGrCnhUMqYcaYmSCd7YxmnLs9TfFzGFeFlYeFj fqGSfGIUyjS/bJPBlMdlobbTmg8d4u/8xl06UKrUKgrLoVhGgfi2tLvG7d/7WphJ eR5yxYKglmwh6nRHbT0UcFHYAUZVghCS2wZ7Muh2qXUPu6RCl/ZZB2t8vz2yYkpJ Xc/+7b0o =Ns06 -----END PGP SIGNATURE-----
