-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Dec 2021 18:45:51 +0200 Source: libarchive Architecture: source Version: 3.4.3-2+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Peter Pentchev <roam@debian.org> Changed-By: Peter Pentchev <roam@debian.org> Closes: 1001986 1001990 Changes: libarchive (3.4.3-2+deb11u1) bullseye; urgency=medium . * Add four upstream fixes for various problems: - fix extracting hardlinks to symlinks - CVE-2021-23177: fix handling of symlink ACLs; Closes: 1001986 - CVE-2021-31566: never follow symlinks when setting file flags; Closes: 1001990 Checksums-Sha1: 0dae66fc788de1716155c99fbc50d2401075edb0 2543 libarchive_3.4.3-2+deb11u1.dsc 53f1400ac71778d14615a66f89e04403548fae76 4811508 libarchive_3.4.3.orig.tar.xz b56d21a38824b2997fe0cb600df4c802b608377a 833 libarchive_3.4.3.orig.tar.xz.asc d2264f7d4f07290ca1b0b36c9934722fedbade8e 30548 libarchive_3.4.3-2+deb11u1.debian.tar.xz 21a6ec5c78035f0d51711f19f6144f0da5486047 7866 libarchive_3.4.3-2+deb11u1_amd64.buildinfo Checksums-Sha256: e72ecf85f7468fc0e510278b83de2545abadc15abe8e2b5c9a8a687cede049ef 2543 libarchive_3.4.3-2+deb11u1.dsc 0bfc3fd40491768a88af8d9b86bf04a9e95b6d41a94f9292dbc0ec342288c05f 4811508 libarchive_3.4.3.orig.tar.xz e43bdc701140383c9e4d90070a684026c05407c95b8fa26a71b20f19a704df89 833 libarchive_3.4.3.orig.tar.xz.asc 8e62a9900c8752058b4624cce46680867109700af9a92cb2404ea1b14d35913a 30548 libarchive_3.4.3-2+deb11u1.debian.tar.xz f190181a5c466d96e46d486783a207d47e0f4dc607e8123adf5b2a8f4900cac1 7866 libarchive_3.4.3-2+deb11u1_amd64.buildinfo Files: c64179dcf8fc5c0c28b9ffa85eb196a1 2543 libs optional libarchive_3.4.3-2+deb11u1.dsc 4b216ea3015ecf8ae555a2026f9a6b73 4811508 libs optional libarchive_3.4.3.orig.tar.xz 74a851a5f2d12379fcd0205526805919 833 libs optional libarchive_3.4.3.orig.tar.xz.asc 1a517b4e9f0c9e611414e0d0f252c12d 30548 libs optional libarchive_3.4.3-2+deb11u1.debian.tar.xz 5308275bd36a839360971fa530e5cf17 7866 libs optional libarchive_3.4.3-2+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELuenpRf8EkzxFcNUZR7vsCUn3xMFAmIRVMYACgkQZR7vsCUn 3xPF8hAAy5n0t/6obyeCZ63LaB/rlgSuY+IVp6tvKYDRaP0HUbTxDsuT/yr1+pWK 75DeTknV1FnpRCtOBzcGJmLBaO67oswpmXSDyteVlR8yN9m+jT/ggpK8qtpGF2Ve FPo2kenIpWwyAdn0DxZx5ccZBVVjZyupEVAhHddcbagxtpeHYiCQkv7Tnk+eglol AMvDzRI+77/Py1VtGoZzMS29W18qgaSByxn3Ay22W1H0uC/za2Z5qn27073syBmm cSB1ynTlwJ05VNvXXGLCH/6LuOUUWmblnFfmUejppzbLRU+PW/8IL5x5r1BbJh7u wf/yJ5P9cFvZwxOaCGpswyK7euAmtty5qWDXPY6OAYnm8VJjvZ4LqkChQ5+WkXts C6cxzGsiJEI7/Pek1UIHaZF7MOvOTS2WPoeQVk+PyE6FGxxUDlcT/lRh8evyGdaz LSU7FGIeNvdKuHGBVSMYo/S9tnGHxjs0SQt8tbqY2IgP2zajqKPeakGFGBgwXWpn M3XeoKWBgcS4TMZBMHGy3ucJHbc1Lv3ScZIX9tPwQg0nhV52EFDcw/DEdm/h0N2p 0su6T8nFtMUWkY/Xmn5I+IFFhlhEP0K4YnnXCLysNlZlutwsaWTqlr4cfpw6AcU4 SAjUeEo05oSobQUp5KNQOQ9g2evgGgu1Lx23pgujhPOmRSSxldo= =3zNu -----END PGP SIGNATURE-----
