-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 05 Mar 2014 22:41:59 +0100 Source: file Binary: file libmagic1 libmagic-dev python-magic python-magic-dbg Architecture: source amd64 Version: 5.04-5+squeeze4 Distribution: squeeze-security Urgency: high Maintainer: Daniel Baumann <daniel@lists.debian-maintainers.org> Changed-By: Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Description: file - Determines file type using "magic" numbers libmagic-dev - File type determination library using "magic" numbers (developmen libmagic1 - File type determination library using "magic" numbers python-magic - File type determination library using "magic" numbers (Python bin python-magic-dbg - File type determination library using "magic" numbers (Python bin Closes: 703993 Changes: file (5.04-5+squeeze4) squeeze-security; urgency=high . * Backport upstream commit FILE5_14-2-gef2329c: limit [awk detection] to 100 repetitions to avoid excessive backtracking. Closes: #703993 * Backport upstream commit FILE5_04-2-g0d74a0e: fix segv from loop overrun * Backport upstream commit FILE5_04-47-gb05926f: Use '%s' format to print untrusted string. * Backport upstream commit FILE5_16-24-g4475585 and FILE5_17-20-g70c65d2: Check properly for exceeding the offset. (CVE-2014-2270) Checksums-Sha1: 79fcc1a87198d41b8be909a693f24ccddf6e42df 2031 file_5.04-5+squeeze4.dsc b4919c07d28b4ce5b442948cc2170961ae74f9c3 65275 file_5.04-5+squeeze4.diff.gz 757e0bd2c230612248a78bf24cceb70c3e4edf30 50244 file_5.04-5+squeeze4_amd64.deb 00ad0b40e003cf0cab559729dbc1519b2024f208 235682 libmagic1_5.04-5+squeeze4_amd64.deb 261094d21a58fedea164decf1ba58a9f78c38215 108528 libmagic-dev_5.04-5+squeeze4_amd64.deb 03899b2131a65d716d29ad525f49c40e9fe42574 38856 python-magic_5.04-5+squeeze4_amd64.deb 5a44520eb5dddf4cd3680e3892ab73e8988cad08 32456 python-magic-dbg_5.04-5+squeeze4_amd64.deb Checksums-Sha256: a0314f2debcca78143bf5acf210b26d09d61a5a50e638f91f372bf665f9238c2 2031 file_5.04-5+squeeze4.dsc b388f4fccd9fcbf324df0f2ce1f2fd2a3bd1ea0f4a0bf04f767655966e0c65c4 65275 file_5.04-5+squeeze4.diff.gz 315837d00da9209ba11ab42599ab7d90108e3ef53e884070920c9fa39f48e7ff 50244 file_5.04-5+squeeze4_amd64.deb 3513d66e3254f579a026d6827f9b90278ac1b958f95584636ac92f3f785dbdfe 235682 libmagic1_5.04-5+squeeze4_amd64.deb 6e4c29bd2275cc3731cc8618d706d97ce57f1159d26ca4bdc1e9d5d3f6d7362a 108528 libmagic-dev_5.04-5+squeeze4_amd64.deb af3a88dd39cf0efb36a686cd8badef0c04f1eb83d60a83698ab5f9c891337824 38856 python-magic_5.04-5+squeeze4_amd64.deb 6ae1edeb492143c2330fc2b4b425cf80e164de468c8688cf2a750e1ac14b9356 32456 python-magic-dbg_5.04-5+squeeze4_amd64.deb Files: a8f230d66f6b7c7e53eff0fc98204d50 2031 utils standard file_5.04-5+squeeze4.dsc b51f978aaed65da1597d8f9abeb47408 65275 utils standard file_5.04-5+squeeze4.diff.gz 069e458c1bdc29f8cfe47fabafb0f394 50244 utils standard file_5.04-5+squeeze4_amd64.deb 6b7bc299c6e1531f550dafcd354084ce 235682 libs standard libmagic1_5.04-5+squeeze4_amd64.deb 083eed03a4810ebde59928fa1422f334 108528 libdevel optional libmagic-dev_5.04-5+squeeze4_amd64.deb 0e20b7772b1a4a0eac1f310696af35bb 38856 python extra python-magic_5.04-5+squeeze4_amd64.deb 1eaeaabb01851507dd8957ef96969a98 32456 debug extra python-magic-dbg_5.04-5+squeeze4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJTHJw5AAoJEAVMuPMTQ89EA8oP/1IPyUEudIneF9hGQypLpUVs ZLkOsFyxe87L+Vz7Rfk3aOdw7sdfXzHeZ219u7N3WGeQhCxjaP1U5IoU1VzQ3FT6 7urd2qxM2quH+ktxOrTNJm2wLTI8gWtbck4ulGil/qp0pM/kZPOa3n/WoCAweap6 tAHjLyh6vZoW5Yu7J8sTaFhmuwzgF5U6pTTAJk2DpL3YmxesX8yzKfASIL+lBkUK b8NCLqaThw9/9NA356Bxzfsgy8aHvMQ8NPCgu0j6y0GZlqLlCEEC+o8Bei9Fj240 x5F2LSiNPVLNTp4WJUMPjuIdJ1h8BaoMmaIMzMpJDL6QRM5o6er3h1fkuEoxly8b 1YM9CCwrKTSXXBdzEWQffCb2zxLAvvKAnK9redV1BNHSVCebhYiM/IsPaOyqBs/t YaUP/ZzYW/vOggGDai8NQlwyjXalQAcRBrtIyUjd2ShuqowvUUfvgqU+P8BnIPtk 4X+f16jpuDc9kso8KKtL+fWod2uZzRTKNybi829KQajlEU8TFFJgwDMdHkRDyNdf 31vQ4O6+6OdT+cWsTE0ijF9lihy0BaTXkn2mUQUrZzk9cfhoiey1E55cGNpEn161 JaNDO3E7l6ZQS4WeR5A+1zIsR58E6KhaUS5inhn9Ez4Cadqs7c/F3isJQ39qxKrr CLv3h/s681cpmG/NGsmt =jxD8 -----END PGP SIGNATURE-----