-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Dec 2014 06:55:53 +0100 Source: heirloom-mailx Binary: heirloom-mailx Architecture: source amd64 Version: 12.5-3.1 Distribution: unstable Urgency: high Maintainer: Hilko Bengen <bengen@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: heirloom-mailx - feature-rich BSD mail(1) Closes: 773417 Changes: heirloom-mailx (12.5-3.1) unstable; urgency=high . * Non-maintainer upload. * Apply patches from Red Hat (Florian Weimer) to address command execution issues (Closes: #773417): + 0011-outof-Introduce-expandaddr-flag.patch Disable command execution in email addresses (CVE-2014-7844) + 0012-unpack-Disable-option-processing-for-email-addresses.patch + 0013-fio.c-Unconditionally-require-wordexp-support.patch + 0014-globname-Invoke-wordexp-with-WRDE_NOCMD.patch (CVE-2004-2771) Checksums-Sha1: c9574b4848753333856f81d67802f295d58c91fd 1791 heirloom-mailx_12.5-3.1.dsc 1cffeed1f2ad9b0253a9f619e2a6f9fb8e3e0aba 9068 heirloom-mailx_12.5-3.1.debian.tar.xz Checksums-Sha256: cfd2dda2d7f1d4a9c855393e4a7e4ece73bad6768108a6cb33126d6161292c1f 1791 heirloom-mailx_12.5-3.1.dsc 62b73665c1d2815e483df76be116b00e20e2e60c6dc5178542ef13d1ddfc3c68 9068 heirloom-mailx_12.5-3.1.debian.tar.xz Files: 61886120ea0d22384dc0536794ffaf54 1791 mail optional heirloom-mailx_12.5-3.1.dsc bc9591c97242d4a95c26a3bea61df969 9068 mail optional heirloom-mailx_12.5-3.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJUlRUgAAoJEAVMuPMTQ89EEwwP/01Kq3GGX8RXSxAlySlbx9Yh AtNoE61qNDs5594VXhdgZ2f6Hv8G++c4GUEqf4k9JQ8uG2qqWnYQyBTNPupeguYq 0846Dozw0SrAX8vXfQQyG9pewu012IScTsJJUZ0TbT42pL+krRPkd9x32cz49GH7 MWOYYpA6Kqsfmjw+/pTrdkWZ9/T4Ee3r6dVnikJmL8u2Sh/uTbIEKKCSF2OXomhQ 41nM7HDO1uM1CnsyfEf5zy0/vZvnF4n2cltnNTCIhVqrNQATQwAz1IyfaKokDJYO JLVsZbWZWeQZtPBVTJRVuMJrAZWcRTsJrWJcsuQESD4qGPqsSdOOHrl/DoBztN8Q SUHDUpwE5iPdrVNi4gxL3UhAeMhibPprgL8OEOhYeEiNNylwHGv9xSopVeAfXmZP QZccTejjZwZrYWUILs4HYHCc5VtWvvuj1v9TcHjzcBZ46erVxpwYHHdEdg/P6Vd9 M4bPx+MXx8kyirOrTeHpjfQFhMkw7W7E7MwFVOfV6I8qeWvKT2wuwHLJBlaLdgO5 YI4YwJ5L68hgRB4j3Lb/w9ZXZL9+OiUDDnawseabQyFmiZLydFQopJtJTRmQFh6n USI6BVXsVtnqa45y6NodWNJTQphfFUzpopecPpm1xZ7i5LMLlWmkPLznX6i+j3Xa FUuW+iXUVwlA4HKT7GZZ =jAZi -----END PGP SIGNATURE-----