-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 11 Oct 2013 09:40:55 +0200 Source: ia32-libs Binary: ia32-libs ia32-libs-dev Architecture: source amd64 Version: 20131011 Distribution: squeeze-proposed-updates Urgency: low Maintainer: Debian ia32-libs Team <pkg-ia32-libs-maintainers@lists.alioth.debian.org> Changed-By: Thijs Kinkhorst <thijs@debian.org> Description: ia32-libs - ia32 shared libraries for use on amd64 and ia64 systems ia32-libs-dev - ia32 development files for use on amd64 and ia64 systems Changes: ia32-libs (20131011) squeeze-proposed-updates; urgency=low . * Packages updated . [ nas (1.9.2-4squeeze1) oldstable-security; urgency=high ] . * Fixes for various long-standing security issues found by Hamid Zamani <me@hamidx9.ir>. #720287 + Validate the port offset of nasd to fix a potential buffer overflow (CVE-2013-4256) + Use better string functions to guard against heap overflows (CVE-2013-4257) + Sanity-check the TCP_DEVICE environment variable for safety. * Fix string handling in aulog.c:osLogMsg() to fix missing format string in call to syslog() (CVE-2013-4258). Checksums-Sha1: f2adc2cdae986a7b8f2dacc380c542198a891b0e 1641 ia32-libs_20131011.dsc c1ac43bee2080f228722a01be91eda15d45aa12f 334665894 ia32-libs_20131011.tar.gz 7364398637610995116edb9d8e976d118575054f 34266584 ia32-libs_20131011_amd64.deb 54470ea5ab9267e73a941e1b30c45acc87860ddc 13081652 ia32-libs-dev_20131011_amd64.deb Checksums-Sha256: e9a027cef118e86c47a87b92f818e348274a8976893000a55e2057671751ffdc 1641 ia32-libs_20131011.dsc 08e2e71665d1c49cfe641c87bd1ff2becc3460ef41626e472cc1475d04f34526 334665894 ia32-libs_20131011.tar.gz defa0a8bac0ce8a2eccd0f31c7f6e1d1eedcf6eb1ef4b79fa5d355a2f2d938e5 34266584 ia32-libs_20131011_amd64.deb 25df84f5eb144c26f20a894e6e5a5caf053b059d72191732843819caf7fdcbf6 13081652 ia32-libs-dev_20131011_amd64.deb Files: 8027d81f9159ee77a9a173abc916b9d0 1641 libs optional ia32-libs_20131011.dsc 4c06748af1c6d4cc32943f3306db1e20 334665894 libs optional ia32-libs_20131011.tar.gz 3d668c8bc7248433a59989adbdc52e1f 34266584 libs optional ia32-libs_20131011_amd64.deb 63de7722a6e3842c6d53aa7dfa428347 13081652 libdevel extra ia32-libs-dev_20131011_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJSWQ1KAAoJEFb2GnlAHawE/eYH/RpkbUyd6qoudQvge7G1FAOg yyTY/xREZmwkpRGiDR0iFmxZATy3FaCi606sL9we1YHtaupWXfUY7EE2cUaILp6u O15S4NaXVsN0qFyVi3fYKZ21edZgCDtA7Zr7mcj0M8X/pza/vqQ5pCweRhxqhK7M yC3RHNuv2pP9Rz1Ib2Dxvxo5QOhvji8sOUh9kUJyhDvT1y01WFkVfPIB97kgTXHw UoJNUlrOYScfvZG/TnBwRQyud/wa7f78x4F42vc+enddS48Y3WMRD3W0vwoNzW5L EVnCXEnoOZsyk+zk97AO+P0vvKqxWm1cwyLKjlv42Yg0aod5gZlc3Z2WwVueZRs= =/92/ -----END PGP SIGNATURE-----