-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 18 May 2008 03:28:44 +0200 Source: peercast Binary: libpeercast0 peercast-handlers peercast-servent peercast libpeercast0-dev Architecture: source amd64 all Version: 0.1217.toots.20060314-1etch1 Distribution: stable-security Urgency: low Maintainer: Romain Beauxis <toots@rastageeks.org> Changed-By: Romain Beauxis <toots@rastageeks.org> Description: libpeercast0 - P2P audio and video streaming server libraries libpeercast0-dev - P2P audio and video streaming server -- development peercast - P2P audio and video streaming server metapackage peercast-handlers - P2P audio and video streaming handlers peercast-servent - P2P audio and video streaming servent Closes: 478573 Changes: peercast (0.1217.toots.20060314-1etch1) stable-security; urgency=low . * Fixed CVE-2008-2040: | stack-based buffer overfow in the | HTTP::getAuthUserPass function leading | to remote DoS or arbitrary code execution | if peercast is configured to use http-basic | authentication Closes: #478573 Thanks to Nico Golde <nion@debian.org> for reporting and fixing the issue. Files: 10e545471f649cd37409dc9cbfd7960a 1070 sound optional peercast_0.1217.toots.20060314-1etch1.dsc c7fc173230621f05137a6420a48b3347 7458 sound optional peercast_0.1217.toots.20060314-1etch1.diff.gz ac385ad05a69ba429c2e300920ff1192 6828 sound optional peercast-handlers_0.1217.toots.20060314-1etch1_all.deb 0a0bd5ef6f4c6632d3f904100474f66a 2924 sound optional peercast_0.1217.toots.20060314-1etch1_amd64.deb d42cf469c93a79a328d7e8e31bc9c90c 50774 sound optional peercast-servent_0.1217.toots.20060314-1etch1_amd64.deb 2378fddac9eea542ee891cb96d77b8d4 172136 libs optional libpeercast0_0.1217.toots.20060314-1etch1_amd64.deb 53638a13906e1599c5938d067ffe729b 323944 libdevel optional libpeercast0-dev_0.1217.toots.20060314-1etch1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSDLETgC5aaocqV0ZAQIWmgf/Y3afdxpaURG/frqBCDTdqs5Bw2RD5GRJ VqeCaWerXVnYAODF+Ao3nWfz5mpB4kZCwKLaaymONyX/0O14Yl4y3URJTAHjZxyr ci8Vq8MGHwiOWUxLfbkBgf+eNtuXK6MN/lobPcAICusFgwz0ttDDfaqpvwF24kWM 534PxFdNbwofEMlY6XloJdf0N3X7NUwrWGx1ei4N66HH5KX4Ckycs1qdRsFqCsCo 2lcB1ew23byijfe4JlpX3ZAY1vUDBZSqDl9wEroZh5LIuih6XBnmAsy/RcEj8Do3 FgewdgSwsOfWiI9neYmM17+o01XQpSfjmlindHFPNwnK2BS5nw9JxQ== =s9DG -----END PGP SIGNATURE----- Accepted: libpeercast0-dev_0.1217.toots.20060314-1etch1_amd64.deb to pool/main/p/peercast/libpeercast0-dev_0.1217.toots.20060314-1etch1_amd64.deb libpeercast0_0.1217.toots.20060314-1etch1_amd64.deb to pool/main/p/peercast/libpeercast0_0.1217.toots.20060314-1etch1_amd64.deb peercast-handlers_0.1217.toots.20060314-1etch1_all.deb to pool/main/p/peercast/peercast-handlers_0.1217.toots.20060314-1etch1_all.deb peercast-servent_0.1217.toots.20060314-1etch1_amd64.deb to pool/main/p/peercast/peercast-servent_0.1217.toots.20060314-1etch1_amd64.deb peercast_0.1217.toots.20060314-1etch1.diff.gz to pool/main/p/peercast/peercast_0.1217.toots.20060314-1etch1.diff.gz peercast_0.1217.toots.20060314-1etch1.dsc to pool/main/p/peercast/peercast_0.1217.toots.20060314-1etch1.dsc peercast_0.1217.toots.20060314-1etch1_amd64.deb to pool/main/p/peercast/peercast_0.1217.toots.20060314-1etch1_amd64.deb