-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 11 Aug 2014 16:38:29 +0200 Source: lzo2 Binary: liblzo2-dev liblzo2-2 Architecture: source amd64 Version: 2.03-2+deb6u1 Distribution: squeeze-lts Urgency: medium Maintainer: Peter Eisentraut <petere@debian.org> Changed-By: Holger Levsen <holger@debian.org> Description: liblzo2-2 - data compression library liblzo2-dev - data compression library (development files) Closes: 752861 Changes: lzo2 (2.03-2+deb6u1) squeeze-lts; urgency=medium . * Non-maintainer upload by the Squeeze LTS Team. * Add CVE-2014-4607.patch from DSA-2995-1. CVE-2014-4607: lzo1x_decompress_safe() integer overflow allowing denial of service or code execution. (Closes: #752861) Checksums-Sha1: 6282558a098b2b199311b72778f163a2efdd1e44 1675 lzo2_2.03-2+deb6u1.dsc 0db2b1189925a7574975dd7b8a1ba23657881a82 4708 lzo2_2.03-2+deb6u1.debian.tar.gz 225c5776a8d7a66cc447fa5c456dcf02d11199ab 148060 liblzo2-dev_2.03-2+deb6u1_amd64.deb 3b05bb69e6a989b82071db21485e68c583caf735 59606 liblzo2-2_2.03-2+deb6u1_amd64.deb Checksums-Sha256: 7170811ec034746bbd28382975d310cfeb70e270e2c4acf4e9876bafe57c7424 1675 lzo2_2.03-2+deb6u1.dsc f0f9848fde2d3d8872ed95a2cc72b31b8ee64fbefada559528297e7b919b5dba 4708 lzo2_2.03-2+deb6u1.debian.tar.gz 010dc78a0eeb826cd2f998d0753232a60b621e0ad9a019a88c6040e1410037bd 148060 liblzo2-dev_2.03-2+deb6u1_amd64.deb ed3867dd3ca57977d45d7de4c04fb70ded3be5f54922cecfd0196a52ef2ecb17 59606 liblzo2-2_2.03-2+deb6u1_amd64.deb Files: ebd3d87fcafc57fe196e98ca26a7643c 1675 libs important lzo2_2.03-2+deb6u1.dsc 92a5978e858b1f70a3b63e7c9412af85 4708 libs important lzo2_2.03-2+deb6u1.debian.tar.gz 25a9e2af606acca7160763b8f861eaf7 148060 libdevel optional liblzo2-dev_2.03-2+deb6u1_amd64.deb 1df8df44c847459447bbc02dd7bdf037 59606 libs important liblzo2-2_2.03-2+deb6u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIVAwUBU+jvzgkauFYGmqocAQjaFQ/+L467UN+I6mniFkQRUXWRNiB+KbDp+Vj+ 9sloBcDXHitHnDJ7ApQ15m5df2FZJ/43axs9+tGM7p7RmQ03yYzXfC+WKZY4KPen vi8PbQRpBQ3v7HaLBwb8ArOydywDK9UX+Qw8RR3cqWKRJ+XRbL7qLtzKNgL0bZaq LrFXPi/1WQRE4oGnrM0wzOyFqn1x9cWCc75qC5x590u4RM3eFu2+8pGbS4iIp+X7 HEXjnudqMqrDAmLn+Sty/34ipXjBregbXph+xU6vTADQ7G42P4OiurvdremyXOhr wzw+6oAUxCamRqG3RMglHtIuJ5FILjck2uHshEo55ZznyXH1n412neFWep0eSp4i vVXazpROwrm9qFvlcjRWNXUvfMzHBASh7SmfMf0CkVXlv5XSek4oYwljBhCdBOcB rwe956NtPvO9WDY8clO9Xd+9mYA5A0L1LyThzR70HwN1PZUUE+1MvHqSKwObg2WI fCgsR4NKteN1yeESJ7dASQq1LwymyNC3VurgYKBWBiJ0+T2Rpjb7Wnq+Fxmrfbva S/Ge1Rj2adeGFcUtyV25YUnCHn9JrdQWKhT3SCGbOG+vI6lUjH0IdlAm/b18k2+k KgZTtaT/UlqBEsMMsy4i11PQwpm1knd5lxn5g35gHtZ7A6s6itpv31QM1rF0puz9 4EicLyYN0Wg= =hnrP -----END PGP SIGNATURE-----
