-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 19 Feb 2021 11:04:17 +0100 Source: ipmitool Architecture: source Version: 1.8.18-10.1 Distribution: unstable Urgency: high Maintainer: Jörg Frings-Fürst <debian@jff.email> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 950761 Changes: ipmitool (1.8.18-10.1) unstable; urgency=high . * Non-maintainer upload. * CVE-2020-5208: buffer overflows and potentially to remote code execution. Applied upstream patches: - CVE-2020-5208_1_Fix_buffer_overflow_vulnerabilities.patch - CVE-2020-5208_2-fru-Fix-buffer-overflow-in-ipmi_spd_print_fru.patch - CVE-2020-5208_3-session-Fix-buffer-overflow-in-ipmi_get_session_info.patch - CVE-2020-5208_4-channel-Fix-buffer-overflow.patch - CVE-2020-5208_5_lanp-Fix-buffer-overflows-in-get_lan_param_select.patch - CVE-2020-5208_6-fru-sdr-Fix-id_string-buffer-overflows.patch (Closes: #950761). Checksums-Sha1: 30533674d100ffed2a4c650d3643d157f6cd694f 1970 ipmitool_1.8.18-10.1.dsc db031657295413a537278ed61b94c3dac6a7e00e 22372 ipmitool_1.8.18-10.1.debian.tar.xz b08bd1012a13e1ed7118443265128fb6bcd67bd8 6258 ipmitool_1.8.18-10.1_amd64.buildinfo Checksums-Sha256: e51232c5e1b7b4f9f0116a57164466ee2b7af3f7afdd77c010103bc84443bfb7 1970 ipmitool_1.8.18-10.1.dsc a816d3964c62bf3d3bf888497c38944a8a1681985365b9c938b80e9168376b63 22372 ipmitool_1.8.18-10.1.debian.tar.xz be1a46a0c50187050f56ae4c4666d1b2c25ded710005718e6ec466cc695dd0fa 6258 ipmitool_1.8.18-10.1_amd64.buildinfo Files: 9a8230266f89abca4fa1700675f12465 1970 utils optional ipmitool_1.8.18-10.1.dsc e616d740150ef8cdf60039dcfe3687e5 22372 utils optional ipmitool_1.8.18-10.1.debian.tar.xz ed61d7658a82f6ef1a2716ec41239695 6258 utils optional ipmitool_1.8.18-10.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmAvjgkACgkQ1BatFaxr Q/7x0w/+M8fj60vdQO2RlYp/kue1TADdvqYJscDoMInxGwzxZJASOOAGGmHO8lsP G/wFF2/OfMgAwNodeMEPRcdjFvH6mCpXIHzsJbW03uBbN20AeHiYx2k7O2WdyoXf XwVVhpYy4oc2rYScRFAq7oDh2ahBzGQKxvCoouJjFJTLmf9AycjnYxaf//dF9fXd LC/VWeBe9beBMpqDAXV3HatQNwifzA7ou4ujsvIMkpeovJnhnoMAZhuXBUBoJfyc D7t4O4TxnelBVbktLck227HGo8F2PLtyumvCiM/ra86NgIEFHMwrTVhGauQbAnhI PyJs3O0hrtkmiQZOHqjGQ1Dre336GM8TBcUqgfpwYhjiZgXwHdYO4bgk8CoUTXoh hg1DmmSBi428S89FBuIYxIEChXO0klOUHu8iiggex0nAM+FqqJFw5xW/7u22N0zq 9acrxj67RPC91xZ2qcre88TRhFYd0d0VFAmZ1ZKJ9afLcc42OgvNUcEzHo93PJ5q LwoxyifArYBloVR3MUJ77A+oBUhYk4QDE4TafdkovupAtHCeqW/jGqBnG3B6hzYF NHLbBiRqu28VR06svRq03jB3tyU3M2GZBy4jHIFwklBnDid/fKPiWGtv+uwQ5Srr doefKXw+EaG5sX30Ja5KXxq8RrBMxLnEyM1NXLtV78wK1tHFXi8= =5WZA -----END PGP SIGNATURE-----