-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 09 Feb 2014 00:16:03 +0100 Source: libyaml-libyaml-perl Binary: libyaml-libyaml-perl Architecture: source amd64 Version: 0.41-2 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libyaml-libyaml-perl - Perl interface to libyaml, a YAML implementation Changes: libyaml-libyaml-perl (0.41-2) unstable; urgency=medium . * Team upload. * Add libyaml-string-overflow.patch patch. Addresses CVE-2013-6393 for the LibYAML embedded copy in YAML::LibYAML. * Add libyaml-indent-column-overflow-v2.patch. Addresses regression for the initial patch for CVE-2013-6393. * Add libyaml-node-id-hardening.patch patch. Guard against integer overflow. * Declare compliance with Debian Policy 3.9.5 Checksums-Sha1: 4be0f5a18f7091a888030b000889baa1896e670f 2168 libyaml-libyaml-perl_0.41-2.dsc c51b4a08f5e8554d7574fa829eacf08f3eb76f9c 6428 libyaml-libyaml-perl_0.41-2.debian.tar.xz 4a5e97179e8f7098c149b7e0bc7bbc7b4684aae8 66360 libyaml-libyaml-perl_0.41-2_amd64.deb Checksums-Sha256: 8a257f78e221885032c2acb1f29a9620ca3e9454656948d5bb6f912e809ea592 2168 libyaml-libyaml-perl_0.41-2.dsc ca632863d910d4485be69bd90ba6b33298caf67ebbc69efdf011f8aebe5b83b8 6428 libyaml-libyaml-perl_0.41-2.debian.tar.xz 86a01eafcdd9a54a3e656d7d7b2f4a61f3e5170404a96000a8b79f5c7e9cec5e 66360 libyaml-libyaml-perl_0.41-2_amd64.deb Files: 1517a196ab108d1be03861bee72f2cb5 2168 perl optional libyaml-libyaml-perl_0.41-2.dsc e75a92e7b9753201b2f99ba3a81dec45 6428 perl optional libyaml-libyaml-perl_0.41-2.debian.tar.xz 5742eb313b891b3ae7ffd5884928f873 66360 perl optional libyaml-libyaml-perl_0.41-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJS+HaDAAoJEAVMuPMTQ89E9qAP/3vH+xg1hSqNJClb+dnT03jM fd2SwnjZ+RWza2dqiQ7VBHK+KfztMobLmZja3jN1WkeJYb/CDAiVLdgl7f2vMBMI 3ZGqFJ5J3irDL8IWJsQJI3An+syMJjjS6ZzRI1asyUb4MpEBnlECIzUN3arZrJOM 4+Fff9xA6aGrSpUXCzwz6ztjjKcRfoV/YVmvkEbZ9qfvbGLtRwp/uccItQHGKUTM jbXueCR/Ys76KTJWFGkHAmRmt5+DiX+cwRgLrm3dgQT0gfmJc4hF2u02SR7dgPo5 JPf7kgpeVjDPSrkuDLoSDeBeJUnEUBt1TWoEpAYceoObn61iyvWtVnMx0Ihll7Ay QlqTtyjzf8jNB2bnPNl2qfwewamGf9Mj1ZxF+VCyZf9FiJYb+xiT2RBfI0JeqSnW woPFSw1UROGV+iUMvCcqfLT6kDViPxU8XVw3PNK2MfyqUXANHfTeo1zivLo3Ggun mOX65xhu68B7q004RfSNmXaTRQ/VuLuokHWjQEQ0eTk5J3J4xpIxJJ6BuMss6d1j Bk9s5ZoQv9x4zc6MgbEeB89KbuYWsPgV1GLCPt6fOgFmjoltWd/3Il/KoYNBdELP aJlHqzYbEZ7CByergR9OhV9FwWt23IwqF71vtRvxZQc05CaOePy6gA5yk3GnBgfj HbtdYyVpCTr7vqAiUZ/z =QiE3 -----END PGP SIGNATURE-----