-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Dec 2014 10:30:49 +0100 Source: libevent Binary: libevent-dev libevent-dbg libevent-2.0-5 libevent-core-2.0-5 libevent-extra-2.0-5 libevent-pthreads-2.0-5 libevent-openssl-2.0-5 Architecture: source amd64 Version: 2.0.19-stable-3+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Anibal Monsalve Salazar <anibal@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libevent-2.0-5 - Asynchronous event notification library libevent-core-2.0-5 - Asynchronous event notification library (core) libevent-dbg - Asynchronous event notification library (debug symbols) libevent-dev - Asynchronous event notification library (development files) libevent-extra-2.0-5 - Asynchronous event notification library (extra) libevent-openssl-2.0-5 - Asynchronous event notification library (openssl) libevent-pthreads-2.0-5 - Asynchronous event notification library (pthreads) Changes: libevent (2.0.19-stable-3+deb7u1) wheezy-security; urgency=high . * Non-maintainer upload by the Security Team. * Add CVE-2014-6272.patch patch. CVE-2014-6272: A flaw in the Libevent evbuffer API leaves programs using this API open to possible heap overflows. Checksums-Sha1: 072315ea691a0835e5d3a0fa705b3f62fc026fb0 2364 libevent_2.0.19-stable-3+deb7u1.dsc 26a4c98592e46c066797f2bdb2ca605e8996a811 684062 libevent_2.0.19-stable.orig.tar.bz2 a1d2277316a0ba8d211f0894c91b9df2bb3aa88a 10540 libevent_2.0.19-stable-3+deb7u1.debian.tar.xz 3a114b5e14c7501db8638386c2c9c4f5b634fef4 321556 libevent-dev_2.0.19-stable-3+deb7u1_amd64.deb 8947b20bf7a842d5fec50786bcc78f2c4668603a 720008 libevent-dbg_2.0.19-stable-3+deb7u1_amd64.deb 71690beed2d0efce3ced97b47b5b590ddfe99532 173940 libevent-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb a5a9d5d991b638646751d529988c752e37410d0b 122302 libevent-core-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 104a14fd9aa05bd824da6597db7f320c2c0e3ff4 102462 libevent-extra-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 5a63346cf797e7de7401824a014e7cc900ea9cf6 44544 libevent-pthreads-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 0d7f31bdb34157dd4eb4fb6aec871283877722f2 52260 libevent-openssl-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb Checksums-Sha256: eb3df9e0202b5053dd06e8b9f049be8974c6880be67a8b8f676e4e43305e2eda 2364 libevent_2.0.19-stable-3+deb7u1.dsc f111b460429289e958cd5f3bb75d06abd920d30ad733ff00a79f5864a7ca62e9 684062 libevent_2.0.19-stable.orig.tar.bz2 c340a40b32730abd4506450fca6ca1929387034c814ee503a502592f27f87ebf 10540 libevent_2.0.19-stable-3+deb7u1.debian.tar.xz 688d095a2bc4e33a9e39660488659ef6688821b7337c93296329392c36ca248f 321556 libevent-dev_2.0.19-stable-3+deb7u1_amd64.deb c8f474cbc2c229e8532bfb7f3d87089210dc7b4e90cb91b545884dbf25d7c6c4 720008 libevent-dbg_2.0.19-stable-3+deb7u1_amd64.deb ad4391fac1a134127663c1fe33197289eaef90e62e0fb99ada662d9086d49290 173940 libevent-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb b5e580cebfb4c96f228b76051e46e8e93785e67087ca8aed86886afca235da70 122302 libevent-core-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 405bfd4853e43c753445cbe9cb10226c03ca8e8d41a6d9d5cdc534bfaae9a2a7 102462 libevent-extra-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb f4ec05413d76c3f333ecc78014e8e9013f26bee2e294ab9c4feee4903dcaf444 44544 libevent-pthreads-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 6bf8e43a2db0354b5232b696b76aa2bc900f0dd139993a503b30193fa00ef1b3 52260 libevent-openssl-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb Files: a9f99ecd8f62ac8e8a8c2a08f893cc84 2364 libs optional libevent_2.0.19-stable-3+deb7u1.dsc b0ba3762c4006e91ff5de70166d10216 684062 libs optional libevent_2.0.19-stable.orig.tar.bz2 2edee9d1f159dac74ece4b174859279f 10540 libs optional libevent_2.0.19-stable-3+deb7u1.debian.tar.xz 8823f77902d78f01cf985c5976cd6438 321556 libdevel optional libevent-dev_2.0.19-stable-3+deb7u1_amd64.deb 3037c763dd3c23679731cce232eebac3 720008 debug extra libevent-dbg_2.0.19-stable-3+deb7u1_amd64.deb 5e97df093772f8ebab75cc9fc1ebe2dc 173940 libs standard libevent-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 8aae1e3bdb0d013ba4fb268abe151ae9 122302 libs optional libevent-core-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb aa57f93440500d6cf088e8af3a6513e5 102462 libs optional libevent-extra-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb 5a5025eb6dee36560146a0a25505b1ac 44544 libs optional libevent-pthreads-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb eef9f11194d410cfb15e76a875cf3702 52260 libs optional libevent-openssl-2.0-5_2.0.19-stable-3+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJUncPqAAoJEAVMuPMTQ89E9WcQAJRwGV4hitGx/4LcRYsWyUO/ gv2yz/tHrX8SEEIEGOhM+4fcbCRG8lRWg0b0pq3jZl39Q3jN+GV7eTQJlEGzupxd GP1xiUfKyQ562NmzT3bWCjOKZq3dDY2PV/exs+XcuR9RA/65Dw2NFgKi7H6htqhw 9IhZvgg5zmVYXyoWycTjVqD+CQQue1VJSrw/lLEPcAeoCqsFCjzzX65wwJ68MPgZ ovg/XfV6yN9XJ2ltSCTwi6v8nIipn7HNxZN3DrjgSdiuo5woy5fn9tkgZEOO/bF2 Y/KPbyjg/5O7Jocc3iHqgqRn1DMQWRAwxJXCsoMSyQSRKIlbly/Yo8uXX5IKqNyq 7VsVOCgav0wkuNd9o3NhxL2dT9Dey+zqih9Jwli2oCsvzTw8azrQ2wbNE73ex/s9 tCqMVh6Cg0/tDH6TlwhtnO97+1+83vOR0XHaJyyLr9GY1qjRH3NTO8quCQDVERm+ 8HvP1U/FD3pdVcyECB/YMcBkEaZlMW63mza8PyGx0oeAVfWFGV+QbCOd3ArT9/An sE90zGc6DngDxmTmmSLIUT/tDqALZSIBzsDEyXTxPwODyCJg6Xn+Pq4257BEYxiZ dpsQLuHe1Rqu0qXetqmjfJ40oiQOqZL1mDQMi+hzpt3j8CkpdlUnn4rJKzoKf/85 pi48PX0v+YMlwGUsCLpQ =Mym3 -----END PGP SIGNATURE-----