-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 May 2014 09:32:02 -0400 Source: rxvt-unicode Binary: rxvt-unicode rxvt-unicode-ml rxvt-unicode-256color rxvt-unicode-lite Architecture: source amd64 Version: 9.15-2+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian rxvt-unicode Maintainers <pkg-urxvt-maintainers@lists.alioth.debian.org> Changed-By: Ryan Kavanagh <rak@debian.org> Description: rxvt-unicode - RXVT-like terminal emulator with Unicode support rxvt-unicode-256color - multi-lingual terminal emulator with Unicode support for X11 rxvt-unicode-lite - RXVT-like terminal emulator with basic Unicode support rxvt-unicode-ml - multi-lingual terminal emulator -- transitional package Closes: 746593 Changes: rxvt-unicode (9.15-2+deb7u1) wheezy-security; urgency=high . * Fix user-assisted security vulnerability, 13_CVE-2014-3121.diff: This fixes a user-assisted arbitrary commands execution vulnerability that could be exploited using certain escape sequences in a crafted text file or program output (CVE-2014-3121) (Closes: #746593) Checksums-Sha1: e8f3128afa537dfcb3df46c1e587a86ecc8ff212 3439 rxvt-unicode_9.15-2+deb7u1.dsc e6fdf091860ecb458730dc68b0176f67f207a2f7 894764 rxvt-unicode_9.15.orig.tar.bz2 d810cb15206a176f0910164ae92e129b9d599d1f 31577 rxvt-unicode_9.15-2+deb7u1.debian.tar.gz 580483cd39a3e1b09efef7e1eb97921cfe494dd5 1316844 rxvt-unicode_9.15-2+deb7u1_amd64.deb de2cc3a2e182b1e3cbe52e0ebcccb5135db872b2 45654 rxvt-unicode-ml_9.15-2+deb7u1_amd64.deb a6bb7983be63ff9a1ed4a9dbf3b9f735b2b42105 1319202 rxvt-unicode-256color_9.15-2+deb7u1_amd64.deb f53106be4aca77f03854560d72dc6544b93b31aa 1081544 rxvt-unicode-lite_9.15-2+deb7u1_amd64.deb Checksums-Sha256: 6217ab1032e90d80ff7d1007b882a02211fcd1e5e4a79cf616be4b39dc8ac53a 3439 rxvt-unicode_9.15-2+deb7u1.dsc ec1aa2932da844979ed8140bd92223defb12042aa5e877e05ac31139ca81f2b1 894764 rxvt-unicode_9.15.orig.tar.bz2 e4c49d6e09c34adc1c860d3fedb8cd3456722551701f3de8799df77026306312 31577 rxvt-unicode_9.15-2+deb7u1.debian.tar.gz 1838857a90adecf2dbd43dcdd99f0f25fca8d548bc0b23a7199e259292163003 1316844 rxvt-unicode_9.15-2+deb7u1_amd64.deb c6e475a17a72a5a217e1e2cd699e487421815678094ddbd309ea22dd30d1a236 45654 rxvt-unicode-ml_9.15-2+deb7u1_amd64.deb 4a8566c606cb9c26e51f12ee3e8eca4737c82fcdedcbcdf704ce1105520a0936 1319202 rxvt-unicode-256color_9.15-2+deb7u1_amd64.deb e66f64604b31d87f977e6b5b9c41de8d4ac949f81504e8f5cf83cc62c9c1d06d 1081544 rxvt-unicode-lite_9.15-2+deb7u1_amd64.deb Files: 28569c80f7bcfd7f6cb5b620bf0d5434 3439 x11 optional rxvt-unicode_9.15-2+deb7u1.dsc 15595aa326167ac5eb68c28d95432faf 894764 x11 optional rxvt-unicode_9.15.orig.tar.bz2 855c2c3535692472b565f3e06c20645c 31577 x11 optional rxvt-unicode_9.15-2+deb7u1.debian.tar.gz 5779de873faa2bb6b12d0402bf732104 1316844 x11 optional rxvt-unicode_9.15-2+deb7u1_amd64.deb 380f890890d19b2b5367ddd2f65eeb1e 45654 oldlibs extra rxvt-unicode-ml_9.15-2+deb7u1_amd64.deb 9f04b94667dba19e994976ed19d55d3e 1319202 x11 optional rxvt-unicode-256color_9.15-2+deb7u1_amd64.deb df52b0fcdc04dddb22192cfe0ccaa9ee 1081544 x11 optional rxvt-unicode-lite_9.15-2+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQUcBAEBCgAGBQJTaj2wAAoJEI97+PxKEcl6N20n/0MCtNwKuU0pQpt4tgMP04b3 BeRVUKKw/IE9j+mdPbpzaSv5qvL5E9uNWRlMkkzE3tLjqpa+5/R7yawPyDuZ8qpd x08MLNsY/bQOSjiZc2bju2J3/Yb6k8hBr1QzJx/bVLM2vUIXkz2AOh1ffFHkxJ2n iWWp5X/ui/kWbI/vUDFNi9eh48WHbIo4t0aqsb2r50gzYDU14zyfa1E/LMH4oBHH IPBE5xH82dzv9I9bsP5eFiMyoTiQo1FjUx56j11leTL4GXvoi3TL/OiTdjLVWQbh dgXBKhXT2nq3P93JPnUlsUUiTBATCCSySyTT0SHTW1GK83rVLJDEY/sMos73fYZ4 VdllXSyC9RMgxBQfjXXjSrnP9X5+WaPSyBInDlIo4GDpk+UI2PC0/Uz3PDgxyF3I JBXBKuUO2ZXaHif4fv0VmAPCagCP9wtOmTLaPpTvmS7Q1XTDseuSw1bLt6b+3APu 7iprydgt0aoV1boeWhPFilDNxvzLQY/LBU9exDMChxylciSD+SXcsrMtss5mSYjG QswJq3k5ARyo7M8mTbSB9Wi+916GwOadNxRHVV6HUCSRiO4D3DunlOazl/0ouFTP ajw0V+RAkwtEmx1GKCKDcGN2HsuZ1B7GgWRMqvrBrlFxWLqQowqY+i3DZfEQeUqN PXo4+SgM7X+rvVxWAAgp3saXS5r/Csqz76540t+WVs6uYkCaxu6oxa+CZW6+BpJ7 s4fbCgjYgZxMkG/yCOipUCLWTnCm1zKyw5tSvUOVGheFbbxjAaDymXCX9lnRKeJB WbAvzZGEpzJjZYPPdaqmprELv/p+8NnslfJ1D/r7B/UKwwODMAjImg3YKX+eKDi4 g2RYdz0YmNih5yBQEHS5FG+mKDr2TUBpeLIT6gj1zBeM34qfEouCXlemqBv2hz/z Adwke9rLKRHmTsGHSlSz5GOAFgCKrG3K3kho47Zhp6iOpJnXSvcVeyOdFza8pY7u Nps8iYcn/Fr9bIDXmjxhSVqlyj/3R8zpmKiWxGaHF+b2KqrnOQnC1nGpL7HVdItZ ucNWKpz71+W8Hah7dLeDI/JALnfgJ0Uk1JBPJ7xGV3JyOT43P0Xd6l8r0rtfGAq6 G3ZS82IBSCKLvrCKqYuXncdy8aM33CYl3sQ0nSH6jB/oTiLrq06l5qlcS1mn3iBX eV8vwehXTbDzr+b/G7Ye2KMegrhwKn5N0k/2Xr6mEYZusNpjWMrLP8N3tK/s2+FR wGTUDEz5WNyKkmGajrdUBxv7Qq0xZZO7jGECcCoaF1C8RQZhQLqWQlpDdZMywovS kLtnDkyWYXk5l+tSzRyoU8o19cuYtgv0BhtY+RXpek7q/cR2DT0relrgG3UUM0wz SC+332iOVdkNSEhfhzZuHIktmeWyEL6sXG6OlOoNrTIcqKPBeV99VQu4+8d7zjA7 OZ5uFzeBNenJ0ke4dlWIOUK8vlBZcEGbR3jmUo/HvaxCTJzXjE9o327SkkXfwKGW d8Ix76/zAEmd/OEQIaXrVlAs+7L8DTaJKrHH/U7z49/LAJwxePnOYUkg+Ptm5gjy bZzWicBBGUYISC0xZvaPYyyOxmca8eG2tvZhFaVVFxq0Ogl6AFp3SFex8zmDnow5 XAEFUmS1NE/brGUqVFg3dmG6kSLM9CKWHWZHVxhhJ5MzxV5AwMc1wlcpjsoFo8Rm zWezwEEtZSZ8b+wVmcSa =fGXw -----END PGP SIGNATURE-----