-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 15 Sep 2014 08:34:46 +0200
Source: apt
Binary: apt libapt-pkg4.12 libapt-inst1.5 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all amd64
Version: 1.0.9
Distribution: unstable
Urgency: high
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description:
apt - commandline package manager
apt-doc - documentation for APT
apt-transport-https - https download transport for APT
apt-utils - package management related utility programs
libapt-inst1.5 - deb package format runtime library
libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst
libapt-pkg-doc - documentation for APT development
libapt-pkg4.12 - package management runtime library
Changes:
apt (1.0.9) unstable; urgency=high
.
* SECURITY UPDATE:
- incorrect invalidating of unauthenticated data (CVE-2014-0488)
- incorect verification of 304 reply (CVE-2014-0487)
- incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
Checksums-Sha1:
8354eaa6a4beac76bd6601626d4b8b47e6d6e287 1705 apt_1.0.9.dsc
2d2af278ccff1e2f750652057517221cd4891939 1814860 apt_1.0.9.tar.xz
616fdb4c24684898bdc91f2e1748283c4247da63 299870 apt-doc_1.0.9_all.deb
f29f29ecd66963bc746da4ba3b252507e7025658 774184 libapt-pkg-doc_1.0.9_all.deb
0b32e5247b0d09002b922ff568882460ca39b9af 773402 libapt-pkg4.12_1.0.9_amd64.deb
674541690dfe5e9b517c017621a1c1190e6d5d3a 167342 libapt-inst1.5_1.0.9_amd64.deb
dd2904836e8e180c60273079bda7bf48514f67c5 1085468 apt_1.0.9_amd64.deb
d48ce38f79a475d45e23df3fc995cae9e705771b 191076 libapt-pkg-dev_1.0.9_amd64.deb
9e4c1d3b1049083e1e08731fd3dbdd5122fecbe2 358982 apt-utils_1.0.9_amd64.deb
459bccaca06b8f3218481c8a062220b1765938cd 133444 apt-transport-https_1.0.9_amd64.deb
Checksums-Sha256:
a0c114ea25cf6531ed4b85f279d59f8d406fa638c770a395396b1f191d8ade22 1705 apt_1.0.9.dsc
4e6f25464a38e94961e107ebd1afb72dbb865d096504aa7194f55c755706c071 1814860 apt_1.0.9.tar.xz
678f6d99dba843464cbb865f1982b23491c1b49cf9e923f5a1ab964faa3c5709 299870 apt-doc_1.0.9_all.deb
4a961927e236cf3dc4a76e1e1bf2a0155a0632ca6303013cc9e33d5751aadd3b 774184 libapt-pkg-doc_1.0.9_all.deb
10d37df8ca7442b068fd2f21703eb428d44c727251d9f1f65a34df9aa76ae63c 773402 libapt-pkg4.12_1.0.9_amd64.deb
d10cac7e6a4590c074227f4fb8f6ceef576f379b4917dd558622e1fa54092d18 167342 libapt-inst1.5_1.0.9_amd64.deb
52c01398d5a2775f5ef0c3e876be5b1bd78ad3acc433dcdca0499f0e483dd7ab 1085468 apt_1.0.9_amd64.deb
b7a8189820d5d92e36bba2e3dc3e95f3d4f54221ba6f2c41748c899216984a5f 191076 libapt-pkg-dev_1.0.9_amd64.deb
e0050add17e56ef231f667782bb5a564c511ec4fa0715c4e3db1630df26893b4 358982 apt-utils_1.0.9_amd64.deb
910c1ca545cef624d35072944d3b0574dcd1fdc83d71ec130932068513358334 133444 apt-transport-https_1.0.9_amd64.deb
Files:
52bd1d77efdb95987be60510b8180b87 299870 doc optional apt-doc_1.0.9_all.deb
ca5de61ec8f9727ca35dfe023585dae5 774184 doc optional libapt-pkg-doc_1.0.9_all.deb
fbec416a0b9296ccf9b2078f577a05c5 773402 libs important libapt-pkg4.12_1.0.9_amd64.deb
65e9dc2c4271c04d2396bb7eaf5038ac 167342 libs important libapt-inst1.5_1.0.9_amd64.deb
12ea8e55f29827fbe35337449a19831f 1085468 admin important apt_1.0.9_amd64.deb
e684c94aa18cbf0e534847aaf0366318 191076 libdevel optional libapt-pkg-dev_1.0.9_amd64.deb
2497bd3991d45d2db959e51b2bd31be3 358982 admin important apt-utils_1.0.9_amd64.deb
2f5ae8fdba07eb8c04ef10bfd84a0354 133444 admin optional apt-transport-https_1.0.9_amd64.deb
e181fbefe4ff2b0af22ee03881eaf65a 1705 admin important apt_1.0.9.dsc
14d68e7bc6a5f3cef28ca1edf744cdbe 1814860 admin important apt_1.0.9.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlQYYIcACgkQliSD4VZixzT5JACdEAgan8lEHhlCtStMUtsELiev
F3wAoJHgdgtR5QSCdsPT9OtGMJKihBVI
=bElm
-----END PGP SIGNATURE-----
