-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Jan 2015 17:16:52 +0100 Source: rpm Binary: rpm rpm2cpio rpm-common rpm-i18n lsb-rpm librpm-dbg librpm1 librpmio1 librpmbuild1 librpm-dev python-rpm Architecture: source all amd64 Version: 4.8.1-6+squeeze2 Distribution: squeeze-lts Urgency: medium Maintainer: Michal Čihař <nijel@debian.org> Changed-By: Holger Levsen <holger@debian.org> Description: librpm-dbg - debugging symbols for RPM librpm-dev - RPM shared library, development kit librpm1 - RPM shared library librpmbuild1 - RPM build shared library librpmio1 - RPM IO shared library lsb-rpm - RPM Package Manager for LSB package building python-rpm - Python bindings for RPM rpm - package manager for RPM rpm-common - common files for RPM rpm-i18n - localization and localized man pages for rpm rpm2cpio - tool to convert RPM package to CPIO archive Changes: rpm (4.8.1-6+squeeze2) squeeze-lts; urgency=medium . * Non-maintainer upload by the Squeeze LTS team. * CVE-2014-8118: Fix integer overflow which allowed remote attackers to execute arbitrary code. * CVE-2013-6435: Prevent remote attackers from executing arbitrary code via crafted RPM files. * CVE-2012-0815: Fix denial of service and possible code execution via negative value in region offset in crafted RPM files. * CVE-2012-0060 and CVE-2012-0061: Prevent denial of service (crash) and possibly execute arbitrary code execution via an invalid region tag in RPM files. Checksums-Sha1: 714ed9c25adc6d28972d4441184b482f73b243f4 2417 rpm_4.8.1-6+squeeze2.dsc e4fb8f7fd3d27c326851a4970c646e94c157f25c 74815 rpm_4.8.1-6+squeeze2.debian.tar.gz a7b291a8f369ea8d6cf11d29384359c0b7a1345d 1185178 rpm-i18n_4.8.1-6+squeeze2_all.deb 3003db5bf850040b3fed628dcf30f6a67981b299 843710 rpm_4.8.1-6+squeeze2_amd64.deb b31d4d09569f85e26284cb080fc6d44a891ac9d9 699834 rpm2cpio_4.8.1-6+squeeze2_amd64.deb f7a9a12fcf19be4582b1bbbcdfb7c9b9ef425386 715168 rpm-common_4.8.1-6+squeeze2_amd64.deb 5ba5aa6616481feff78df0a6618fcb88d4e17943 1254754 lsb-rpm_4.8.1-6+squeeze2_amd64.deb fa66dc9bfb5d1e15356ce74affc7e22b2897580b 2667218 librpm-dbg_4.8.1-6+squeeze2_amd64.deb bd68ca8c4e072cec30acf966d9f12ad44ad15354 892004 librpm1_4.8.1-6+squeeze2_amd64.deb eb5a5b20e25b714434b7f4174fd99cfecb632d92 778994 librpmio1_4.8.1-6+squeeze2_amd64.deb 33e96a0417b0e781dbd9025eae5fbf3756f092bb 764738 librpmbuild1_4.8.1-6+squeeze2_amd64.deb 510dd855897308c3c06b86ea3e5e2755193c6de6 762804 librpm-dev_4.8.1-6+squeeze2_amd64.deb 56d783a83215a13e41ba0f6b58265a4538203a57 734390 python-rpm_4.8.1-6+squeeze2_amd64.deb Checksums-Sha256: 2fea14698fdc67985b7875f8b1e52aad93a547fee3340b861658aa2f7d245915 2417 rpm_4.8.1-6+squeeze2.dsc f31827e744993b69e5ddb9d4b9fc2287accfe0efc01b12acf3ff7a8e8918a28a 74815 rpm_4.8.1-6+squeeze2.debian.tar.gz 87d20cabc64681e53c5f71bb0bc92025dae5868445f3686a141bf7e0884cadd5 1185178 rpm-i18n_4.8.1-6+squeeze2_all.deb d39739e8424fcb2b87c05e9f623e53205912fdbfeada8dd2e797d7c5e8fe90fa 843710 rpm_4.8.1-6+squeeze2_amd64.deb b4bd539061c8372a964a93807643e3bd8d8664ab26187130bfdf24e862a3f42a 699834 rpm2cpio_4.8.1-6+squeeze2_amd64.deb 35a5d18dcbda22953a873e53af1fd9531d51ac7186dce45b8a8159730fa6d0c5 715168 rpm-common_4.8.1-6+squeeze2_amd64.deb dd52989aff81dc4b858db2b3501522d9a1a635a36cfc7f58f2a3779aae439459 1254754 lsb-rpm_4.8.1-6+squeeze2_amd64.deb 4ac34d632044e93515d6ad4950104d1318a0ddc0cf722d79c81f500a7c7210b1 2667218 librpm-dbg_4.8.1-6+squeeze2_amd64.deb 46c9effaf22c9ae5e7f01d02c4811ec62e9ca2be134e9597a053e089a9474ff2 892004 librpm1_4.8.1-6+squeeze2_amd64.deb ef366ee9ca51a576b866c3cc088a92e2f13994e3bf245b80f883852bd9679218 778994 librpmio1_4.8.1-6+squeeze2_amd64.deb f0018b48c25ff9c2d175daaa2148c0a20f7c4c05a3ec1e34198dc47bc9f097a7 764738 librpmbuild1_4.8.1-6+squeeze2_amd64.deb db424a2df28ec69c92f60d98c9d3d07d774ecbf81a8eb7a07d01e3e3cd179a90 762804 librpm-dev_4.8.1-6+squeeze2_amd64.deb d79c694068831a2e9757a0de3cb410a0994728be071a7c9041eb4ab3ff56030e 734390 python-rpm_4.8.1-6+squeeze2_amd64.deb Files: 7b604f635c7642e1d01a83f9c5497d3f 2417 admin optional rpm_4.8.1-6+squeeze2.dsc bcfd969100ac90ec4d7e394660610935 74815 admin optional rpm_4.8.1-6+squeeze2.debian.tar.gz f4433f0b99e8aaf62e4c4c2b7e045d22 1185178 localization optional rpm-i18n_4.8.1-6+squeeze2_all.deb f51f57a5e71af02fc61718f8c45256de 843710 admin optional rpm_4.8.1-6+squeeze2_amd64.deb d119286540fc1e0779fe21449a9158af 699834 admin optional rpm2cpio_4.8.1-6+squeeze2_amd64.deb 0cacdc2e34120214e998a0c20f77b9ec 715168 admin optional rpm-common_4.8.1-6+squeeze2_amd64.deb dfe4ee77ae24ae9901998b7c1aaa363d 1254754 devel optional lsb-rpm_4.8.1-6+squeeze2_amd64.deb ff25a01f54ee166cc1cafe72c34f188d 2667218 debug extra librpm-dbg_4.8.1-6+squeeze2_amd64.deb 63daee045a3452cf2b53047e44b10955 892004 libs optional librpm1_4.8.1-6+squeeze2_amd64.deb 10f9eec69db2d099512504befd2e4f9c 778994 libs optional librpmio1_4.8.1-6+squeeze2_amd64.deb 35b17de4ad6a8c42997b9f58cc4ee4cf 764738 libs optional librpmbuild1_4.8.1-6+squeeze2_amd64.deb 23b083f1c829b44c96e587f02630453e 762804 libdevel extra librpm-dev_4.8.1-6+squeeze2_amd64.deb 4bd71e0cf58b4f950710a971af44b0cc 734390 python extra python-rpm_4.8.1-6+squeeze2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIVAwUBVMke/QkauFYGmqocAQo9fRAAkQ/bbkpHTg/99mhR3x8Ud3Z7Va4yzHwt tlkBOp3//Q2xWA0CBICH2+7EScJGZTuMNTKt4PnLXBf136u8Watzm/tp7y0DF7Vm TI8eZDeySAmZ5PSfNf10gs8Mxts9Q/lXYa21S0YntPJszfliC+/UG1hw6UTHZEJL GrR4BhEmh0LhybepIIi/VymI2phiEBrWeEuS/+Zph6aAIBvvROD0QfFA2AGomAde VQKJ68LhkZmMDmwSa2QNeWwhQntOjSzuiPxFr3FO6q1u9O6I0SwHoz31CWIUvVQO iA7MfmdFodMA6ldJv2PokXAUXJgw7m6MMLFchboi+ku8XOpikS3tiAvz0qttnQmU exSrn7kQUrZkHk1WTGSahV1UeVIjVDC+UcVPj5bxSwoFNqKLaF3Vd08r3kjhoOhV EU14BcxVdJOfCbKtjQBd0k4zSipSzU28bMMofkPaswDtsjyYIoKPxh4vYTSsal4f iS8A1r+a+OEobvkvh2rJaBRaYAIhTEDZoLXuMh8HbUwE35snZIgfk9fRAGoALf/w bffze8GU5BRSFre2mC3pZv9LHILpq14e54qMApXaTYLwOHrT3wf56QX3QeVV7mwj sZAJZY5acnejimKLeJ4lnt9543NA7Zub4K2VhnfmgS5ZAH+yzeZo0DbeNOjaC81t gmwpb7m0w0U= =WPn/ -----END PGP SIGNATURE-----