-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 03 Aug 2012 00:03:19 +0200 Source: libconfig-inifiles-perl Binary: libconfig-inifiles-perl Architecture: source all Version: 2.52-1+squeeze1 Distribution: stable-proposed-updates Urgency: low Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Description: libconfig-inifiles-perl - Read .ini-style configuration files Closes: 671255 Changes: libconfig-inifiles-perl (2.52-1+squeeze1) stable-proposed-updates; urgency=low . * Team upload. * SECURITY BUG FIX: Config::IniFiles used to write to a temporary filename with a predictable name ("${filename}-new") which opens the door for potential exploits. -- CVE-2012-2451, CWE-377 (Closes: #671255) Checksums-Sha1: 6349397fc037980dc8d304cb9725f709021fb654 2171 libconfig-inifiles-perl_2.52-1+squeeze1.dsc 0b5b394b8ec23e4e4b64d05cd5d8eb5714194198 11847 libconfig-inifiles-perl_2.52-1+squeeze1.diff.gz ef36fd360edf41df3c54e8cb58c97acc16e40bcd 48032 libconfig-inifiles-perl_2.52-1+squeeze1_all.deb Checksums-Sha256: f26955538817e406eda61eb2eb6ed6137ca203880883a44014fd384dac4f448c 2171 libconfig-inifiles-perl_2.52-1+squeeze1.dsc 5f5a05b0a9ac40193a95760aa3e39f70620d05284d901f50afad4e1bc802ea1b 11847 libconfig-inifiles-perl_2.52-1+squeeze1.diff.gz 4ea093e3503d41c9de8f425e0df0cc2f2d39823e0fc7bb587a955e0941ccbd5e 48032 libconfig-inifiles-perl_2.52-1+squeeze1_all.deb Files: 0e91b9d9cee81d25e7bcfd4234900a21 2171 perl extra libconfig-inifiles-perl_2.52-1+squeeze1.dsc 2915e67a210ade43adc331c363e87442 11847 perl extra libconfig-inifiles-perl_2.52-1+squeeze1.diff.gz 4a54951f40826e8f1af4937733fd7ced 48032 perl extra libconfig-inifiles-perl_2.52-1+squeeze1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJQGvlrAAoJELs6aAGGSaoGmWIP/05IUxLnNEqaoOPBnSXThb6l 5L6KvDIZgOw/5VYe7GWtKJ1cNGGfkYzS0Zqk8CMCYvWKSs7W/PJXQRA+m2Bexwvn fdKvuI0cExzEZm3antFgwO0FulO3eD3l2V+G3RpeNEAf2FH7KcBdtVHUAuwToSiL VaEE8TkEYS3b5goMEtWB/qEDuiNEBzQVvOXkgWjHg/wOsoqHQzCFJ2b4w2fJdH3Q rFQP9KJI+g1l0qWp22iUIM5gwV4vH8q2L3E40Vnrt61JMBd3qtj2JtUnVZnnIcTX NLF3LvJ3m+ElFTf1wbhHXocsrawR6hEMpeYe3YncNGFQEhmXfZsuVeIJMxOYV40y c6bGHtjgEyRrIOJM76j6ICPjHDyg+RV/WEMALZ4wgcIeAgRAoSEyhbsFPRXgfGXp LbURNJOzF4SpcdB7Z0Egqlc4cu7gE/9+7IH5dMbgTMswM1umhD+C855H+ggEQzSY EFxznHwyF0KS/zlrxcgN6Pnq7uMcpy0MB+XCCPqIIpMKxzuX8NK7wYnMQi6siHYl sbxoY0g5Qit06Z92rKEgVr4Gb6sMU5HO7SM2yUqFNCjq/6SnWLUii0Gj2V8ZegDZ ZhgI8xrsbZUDmIBmbrqVOHm8wAgmXZMUiBYIUKpOOlVBpFhpjGhI9Xvno6piIp8c Ysq00V2ybmqgpyniLtdA =oD5T -----END PGP SIGNATURE-----
