-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 May 2015 09:59:27 +0200 Source: ipsec-tools Binary: ipsec-tools racoon Architecture: source Version: 1:0.8.2+20140711-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: pkg-ipsec-tools team <pkg-ipsec-tools-devel@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: ipsec-tools - IPsec utilities racoon - IPsec Internet Key Exchange daemon Closes: 785778 Changes: ipsec-tools (1:0.8.2+20140711-2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Add bug785778-null-pointer-deref.patch patch. CVE-2015-4047: Fix NULL pointer dereference in racoon in gssapi.c leading to a possible crash and denial of service attack. (Closes: #785778) Checksums-Sha1: 46cbcebf6a2e6f02960db63f3643e667ecd61ccf 2289 ipsec-tools_0.8.2+20140711-2+deb8u1.dsc f342ec3e0d5d0eb505f06f6772b31100cacac8bf 1102890 ipsec-tools_0.8.2+20140711.orig.tar.gz 5ea8d7980eedaf4f3274519b228f48b36a47ac0c 61896 ipsec-tools_0.8.2+20140711-2+deb8u1.debian.tar.xz Checksums-Sha256: 7f27da9988cedc5a9afbf5943748a59aad80955e35754beaba11e174f38e1b44 2289 ipsec-tools_0.8.2+20140711-2+deb8u1.dsc 5e702549103d4cffb73d5bcd3a9b4cb75c398e7988f2421b2901cc0e15915785 1102890 ipsec-tools_0.8.2+20140711.orig.tar.gz 72be17c43042f161a0cf6256d73560b9c6f120d97f258e86f0098b953f02713f 61896 ipsec-tools_0.8.2+20140711-2+deb8u1.debian.tar.xz Files: 88107427cd9dea31d1a39d25a005073b 2289 net extra ipsec-tools_0.8.2+20140711-2+deb8u1.dsc 8c222aedb897820e946aac203113b650 1102890 net extra ipsec-tools_0.8.2+20140711.orig.tar.gz 63a681a83ccd55f3d78470e98d91032a 61896 net extra ipsec-tools_0.8.2+20140711-2+deb8u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVXuVLAAoJEAVMuPMTQ89EmisP+gNUMHGJ0qk/ywhSqe8u+dua 9ne3OQ9wut1ni+DMtPUB7H4/YZNC0igEGxARGou7JRF7tM8JxciljersqvIzfiFK FYTLCWIbmcyJxyW1yte4Cpw5Ud74FypiCcsCWeV5HlABIVnt6lQXvSvj89kuKOYY JLUEMmoe1W47a/gnu5EofB/DVPknjx6QYaoKMZoUqIwZeX1W5up87gLr7Xzdh+hL ftdMkFwTVkPYzVI985DIoTnlDebtBAmE2PE+nJVwTI/W9zMFnRMWpwVeEc55wZR+ d6MBL8GsU31dnbzDuOZXMlJxp9C9aXaTN9OtFhkg1I37HK22eO8ZiYHy65zad9rY zPir8zpS9FTPpgnB8CVxj1JLwheUewCgpdSsZ2/TG0LtdQ1Vk8TbUeUuWNehE0qe gZR5o9SIcm24g31jMQf0qniCZQsVM17ksrTlep+nt5DPi9BOHfnjdkZz+UmF73JA kxBzg2F0sNG9umBoyJ3XphNzW7PYJM6XR7PHL9GgC3hV9cJlKuHvZi7weS33KLNA h8VYH1PfR4qOeKuOZ0z0Ou4pbTYVDTRDHMW6jG3KoHZ4tQOYVhsFftCp6XNAz4Fu 57yxxa7CtgpojHRAngdcNdnOvbIxRLx7sG/NvjhOnvjn5KHLxwNWFfjTQ84oP0sK ZRTChxCN1T8DRyFn+w0h =guGp -----END PGP SIGNATURE-----