-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 16 Mar 2005 18:24:55 -0500 Source: xloadimage Binary: xloadimage Architecture: source i386 Version: 4.1-14.1 Distribution: unstable Urgency: high Maintainer: James Troup <james@nocrew.org> Changed-By: Joey Hess <joeyh@debian.org> Description: xloadimage - Graphics file viewer under X11 Closes: 298926 Changes: xloadimage (4.1-14.1) unstable; urgency=HIGH . * NMU * Apply patch from bug #298926 to fix shell metacharacters vulnerability that could be used to execute arbitrary commands by using shell metachaacters in filenames for compressed images. (CAN-2005-0638) Closes: #298926 Files: fd36d5cf81223391a6984a4d0db6feb2 613 graphics optional xloadimage_4.1-14.1.dsc dce0369e598d2c9ba9c0908bc2ef1e58 65501 graphics optional xloadimage_4.1-14.1.diff.gz 261e096495d2e5f68827726bc60163bb 112484 graphics optional xloadimage_4.1-14.1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFCOMGr2tp5zXiKP0wRAkEeAJ4yVpdmzu/S9vzmwfxdLX/FBNfxuQCglm2D rkUwX+Ma35T+6opHCtv6C7o= =hcsX -----END PGP SIGNATURE----- Accepted: xloadimage_4.1-14.1.diff.gz to pool/main/x/xloadimage/xloadimage_4.1-14.1.diff.gz xloadimage_4.1-14.1.dsc to pool/main/x/xloadimage/xloadimage_4.1-14.1.dsc xloadimage_4.1-14.1_i386.deb to pool/main/x/xloadimage/xloadimage_4.1-14.1_i386.deb -- To UNSUBSCRIBE, email to debian-devel-changes-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org