-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 May 2025 08:03:02 +0200 Source: openafs Architecture: source Version: 1.8.6-5+deb11u1 Distribution: bullseye-security Urgency: emergency Maintainer: Benjamin Kaduk <kaduk@mit.edu> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: openafs (1.8.6-5+deb11u1) bullseye-security; urgency=emergency . * Non-maintainer upload by the LTS Team. * CVE-2024-10394 Fix for theft of credentials in Unix client PAGs * CVE-2024-10396 Fix fo Fileserver crash and possible information leak on StoreACL/FetchACL * CVE-2024-10397 Fix for preallocated buffer overflows in XDR responses Checksums-Sha1: 2374cb919aea82b00a48b0d0c321fa9400dd9a35 3908 openafs_1.8.6-5+deb11u1.dsc 3040bd317ba91292d9d0263885e5112f4dc3beaf 6735812 openafs_1.8.6.orig.tar.xz 0965f9f7f3058c49bb03494bb18c22e5838d73e7 167064 openafs_1.8.6-5+deb11u1.debian.tar.xz adff3e9627572e0aebd19a4488456fc32ba2736a 18121 openafs_1.8.6-5+deb11u1_amd64.buildinfo Checksums-Sha256: aea6d225980449d2ce7af466496fee99b36c4aa6f2342c7c8cc84dc7db984015 3908 openafs_1.8.6-5+deb11u1.dsc 825686c0521881007256c611323acc3fbc00293a48d88b9c097b3741c2335b10 6735812 openafs_1.8.6.orig.tar.xz 5a857c544fcb21e9452a5cba6b57e5809b140b49c446804dd41020f0226e85e7 167064 openafs_1.8.6-5+deb11u1.debian.tar.xz 22b983f4e58523f64e1c3ae72d30e3ffe0b5b986207fa094c6340b74862626b6 18121 openafs_1.8.6-5+deb11u1_amd64.buildinfo Files: 0bbd2fd1c8243adedc29d25b216f974e 3908 net optional openafs_1.8.6-5+deb11u1.dsc 998b44523675eb11b6c1805fc204c5e8 6735812 net optional openafs_1.8.6.orig.tar.xz 886b945eb74f399562be5515be2deb30 167064 net optional openafs_1.8.6-5+deb11u1.debian.tar.xz 7e2d6fac12d8dc0648eed11542d1f01d 18121 net optional openafs_1.8.6-5+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmgocL1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRzq+EAC9EpXlcAuSWjRNoYso8bdRsOHjr5Vy wULOzcv2JMEJh4fK3w0h8pL6LKOnWB1nwt1jzLLL2OeqnzlHFjAQdSi1crzqoZuU ECZgD/fxXYLaq+FZlabRiM39/MefGLl9iuUeHTASeBY97G2u+CMWWRx9270mc6Zd /rcqYKDf36Jb0IDx46fXV0jmA7l8x0QjEwSfZOdPcY/o++JOOLlrKj76JnnfqpiK To1yA549Cq7UN3KPvtVWcwkcWxXMkTtrdC7PWFxlLRIU/h+BshSUSafZgYd8STnY XUaqaH8Es0Y9r4FCDCcuxQ6sG3EUuv1QRhidS9gb4XDcqUY56PXVgHqkEHPYY8Qm +f1IbXfrait2lJDkv2VLt0u/xLktX85bCrtFr875Uz1fbFkQUYi040T3dfQRYpOR j+5V4IzklYEn2M9ADXQF8J/wcMmSISFs6iXcfJf44C2rcu9kyrLvvlhYzoPdatzH esmvJTOACARQ2svqPe6JgHMcvkvMXUzi/9e3TE2XCMA1mNAeXbJ78jU7VpXhoURR wnpz5HiY06ToFOw4shZTICb8U958v6Vi+6M5WaEER/BsgKXwhEMMDRCrA7xEt5Yh 66gIx5L7JpYBhgQ/TIMSQv6DmUSKbKJUiVtmwC52knb0G8oGlF+d4rEPvrCxoz5d Zld1s9To3qz+uA== =jxg/ -----END PGP SIGNATURE-----