-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 17 Feb 2012 00:10:07 -0400 Source: notmuch Binary: notmuch libnotmuch1 libnotmuch-dev Architecture: source amd64 Version: 0.3.1+squeeze1 Distribution: stable-security Urgency: high Maintainer: Carl Worth <cworth@debian.org> Changed-By: David Bremner <bremner@debian.org> Description: libnotmuch-dev - thread-based email index, search and tagging (development) libnotmuch1 - thread-based email index, search and tagging (runtime) notmuch - thread-based email index, search and tagging Changes: notmuch (0.3.1+squeeze1) stable-security; urgency=high . * Backport MML quoting patch from notmuch 0.11.1. This fixes a vulnerability that allowed arbitrary files to leak when replying in emacs to a malicious message. Checksums-Sha1: d1144339d5ee8c8253def2843e0c64693456bfb3 1230 notmuch_0.3.1+squeeze1.dsc c495a3edba3d9471b42ce2a19c7fd8e7cdf2b29d 245764 notmuch_0.3.1+squeeze1.tar.gz c17c394d65b07f08c51e85d92c11f9631eca6ca1 91604 notmuch_0.3.1+squeeze1_amd64.deb 7fe7866a4af78cc415864b2fc2ed7a774955b677 51532 libnotmuch1_0.3.1+squeeze1_amd64.deb 2624823f259b8883e5a193f154da5855ad97388f 13912 libnotmuch-dev_0.3.1+squeeze1_amd64.deb Checksums-Sha256: 9b023c1c5afa09e0ad418866e0269319d1ca0a22c4492d6e391c10717afa9063 1230 notmuch_0.3.1+squeeze1.dsc 0e21dc258bd5972e68ac21d32dd3d2db9e27b2d67af5a243bdd447a8d32a9066 245764 notmuch_0.3.1+squeeze1.tar.gz 3650b91f4f4e6bab8f07e383150e46e844dc1edc1279cc76f7ad801309b56303 91604 notmuch_0.3.1+squeeze1_amd64.deb 71264d2acf85dc62dc95bb8ba548ae0ec2d3f78ff0228a76dc2973a3d19673de 51532 libnotmuch1_0.3.1+squeeze1_amd64.deb ff2069dc633b142c3e8fb2866ac3176fc75cfd2aac7606a843f743b84d6630e9 13912 libnotmuch-dev_0.3.1+squeeze1_amd64.deb Files: fe4f20e18621b210dc4eb2de54ac8308 1230 mail extra notmuch_0.3.1+squeeze1.dsc e810a08df77180e8e4f30b7649750553 245764 mail extra notmuch_0.3.1+squeeze1.tar.gz ff7b683b82751410884741a033c6c490 91604 mail extra notmuch_0.3.1+squeeze1_amd64.deb ee74ee110b66843072f0cd579a202918 51532 libs extra libnotmuch1_0.3.1+squeeze1_amd64.deb 3f73545bb8fab90cd58f856f2bc36194 13912 libdevel extra libnotmuch-dev_0.3.1+squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iJwEAQECAAYFAk8+Pp8ACgkQTiiN/0Um85kM1QP9HD6zXto7/taW/d3wCv/K3Te/ DQH9f65Wh1q1oRpgGqJ9nUR7+gZbyeLJaWUw9ovKDQ1ndUvCG/RHrRMSuPnT2Atz +lctS1ysM/RIaXdxpHVrDqk/yozCdW3/4iCTZrG8MEJGn8FxYFKYTW97l1gdgtdD ErrZVhIs/mHV/pt7vjc= =7MHg -----END PGP SIGNATURE----- Accepted: libnotmuch-dev_0.3.1+squeeze1_amd64.deb to main/n/notmuch/libnotmuch-dev_0.3.1+squeeze1_amd64.deb libnotmuch1_0.3.1+squeeze1_amd64.deb to main/n/notmuch/libnotmuch1_0.3.1+squeeze1_amd64.deb notmuch_0.3.1+squeeze1.dsc to main/n/notmuch/notmuch_0.3.1+squeeze1.dsc notmuch_0.3.1+squeeze1.tar.gz to main/n/notmuch/notmuch_0.3.1+squeeze1.tar.gz notmuch_0.3.1+squeeze1_amd64.deb to main/n/notmuch/notmuch_0.3.1+squeeze1_amd64.deb