-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Aug 2023 20:51:00 +0200 Source: file Architecture: source Version: 1:5.39-3+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: file (1:5.39-3+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * stack-based buffer over-read in file_copystr in funcs.c (CVE-2022-48554) Checksums-Sha1: 6cbe01f799932271295074eafaeb6c78427414f5 2424 file_5.39-3+deb11u1.dsc a5a8941a8e4c436fe22933db6a71c5161c3fb10b 954266 file_5.39.orig.tar.gz 605ad4661bc2464aa19cf5db779ac5c5081c4f26 169 file_5.39.orig.tar.gz.asc 6ceca8d4293de3fc4ffa0175cf1a135678cdc4b9 34816 file_5.39-3+deb11u1.debian.tar.xz Checksums-Sha256: b08cfd706099600aa634d3cdcc2a7461908902414ae8cbfd1caddf557983e4e8 2424 file_5.39-3+deb11u1.dsc f05d286a76d9556243d0cb05814929c2ecf3a5ba07963f8f70bfaaa70517fad1 954266 file_5.39.orig.tar.gz 409232b54cabe3082f38f1e7ec4c69e7d937f26d039da691f7349d142b48df83 169 file_5.39.orig.tar.gz.asc c4ef624328d06f6128d808fd0edc14b1d856d6fefe0f29dfcae0ce30b42de0a3 34816 file_5.39-3+deb11u1.debian.tar.xz Files: 3b779eb3da264a991e735cd77af1c428 2424 utils standard file_5.39-3+deb11u1.dsc 1c450306053622803a25647d88f80f25 954266 utils standard file_5.39.orig.tar.gz 997ba2f348e29ae7f4f96de1d21ee069 169 utils standard file_5.39.orig.tar.gz.asc ffaa2a4ac17747eaab340752f0020210 34816 utils standard file_5.39-3+deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmTwGT5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EK/gP/3UOrlCIi9MhTf2lydu2Tay/f0MUkgYf ECMvjX2AI4izVrfA73yFTgGXKqIYP/Qa/ve01OtGS8LUseD2A1oMoWWEk1+OYiOS XgC8m9VUOny0V6At6LCFpqtS6IoChEx89C/RVcadn1a4d7UBVHGu2Xo/eOtn679P vxzWMN1ff++xnz6VBtTudBmH0TwhzsYJcC2VvwhixvzA8s93rdKbTqNL33xdjdmv U6+FYUlKNPSnrCMxHctNB8y4p+G0vh5OVIpflAqFiNpGOpywcLUAvkkwENxgknIb 7Ov75lVjSxXxJRnPO2DdDkNuet2dkxZ1R2hKBUR8Ih260aa86yD1rKUhV4mseB+1 DVH2ZHsTEcxK9gHZg/jECfzZen3VNLGam0YaSVTBLgFm9uek9dAnWV1uQacV7pKw YT09vqKb//i3Hra1BNNzHs1F9eBsBiNrPauiQcqsXoTZCyES4MJ+l3b+dPQb0ijE OJocuz8x/shwXJtuVaK53u1mYYkuNW657chqiMsJMdbvYTb1nZMNLWPDoqqxvaP3 v/MSmvn7seLI9rpyy8hdHi3OHGOOvYlwsCmI8ziYPktDmvuuCqoixUgBqKajc9+V l3ulcoAYMj0tcsWoWlVxn44ymO+UtCdGS5XoGF/NuEdjG1hoC5LSobb27qa1G28d 6BsHypt7YYyb =6lXx -----END PGP SIGNATURE-----