-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 07 Mar 2016 08:29:49 +0100 Source: libotr Binary: libotr5 libotr5-bin libotr5-dev Architecture: source Version: 4.1.0-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Debian OTR Team <pkg-otr-team@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libotr5 - Off-the-Record Messaging library libotr5-bin - toolkit for Off-the-Record Messaging library libotr5-dev - Off-the-Record Messaging library development files Changes: libotr (4.1.0-2+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2016-2851: Integer overflow on 64-bit architectures when receiving 4GB messages Checksums-Sha1: a4229bb4b1cb960d30d92d3e7ea7b18a2c6e0f89 2110 libotr_4.1.0-2+deb8u1.dsc df30bc87a7a8f37678dd679d17fa1f9638ea247e 576771 libotr_4.1.0.orig.tar.gz f108846fa60556ad9f6254888a4a8ab4875c9188 10900 libotr_4.1.0-2+deb8u1.debian.tar.xz Checksums-Sha256: c415930010b5dbc9fda9c264c82595de01e1279b5d41ddad327343b0ad13f963 2110 libotr_4.1.0-2+deb8u1.dsc 4fdb891940ec89d300190a98f69a9138248dcb8c8d337633fb981b8d0a9cd930 576771 libotr_4.1.0.orig.tar.gz a4de36af58494bf997648758c0f982228a6bcd02a542c3e897df8688f8b157e2 10900 libotr_4.1.0-2+deb8u1.debian.tar.xz Files: d4bd0d8d898a4e6c48845d5fd49c47e3 2110 libs optional libotr_4.1.0-2+deb8u1.dsc 6589f81e7ccbe244f265e8db372814a2 576771 libs optional libotr_4.1.0.orig.tar.gz e17fe2965c3e7dc7dc119e298672d7ce 10900 libs optional libotr_4.1.0-2+deb8u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJW3S9pAAoJEAVMuPMTQ89EGx8P/3MF7NnPOaInknHxUvvPuNVU d9e/ZozY9A1F9oh0ng9ePgettzKci82y+YmbgS5j0E3pxtyNqFL8rbWOIZKA0LwB Cdwx2Fqrgd0FH8FuxSI0dtm61I6WDiCHBksN44SgDia9KpD1peiRYc8tcpUTqxpI G5PJgBDWUyXB7gnDG0cpDWe/uR/+1FGHb1Oa5qnW1R1d3ZVkITpEo5J9j9MyKvu4 sEeH294YcYK6Lt4T2gFN83pJH4KawcE9qNlmP5Et22DJcJ44oLuqv8uyJrhofmF+ H/dZw7/uCbPy0vOqIsQaN2PJ2zucQ0DpvMpqiN3ZIl/mko5hnzBsQu2DqlxHxWzb dOYVftrKURyQ1cPOBxLcSgZYrYgT4roJ9xx07TtxXkmypjPAJzm/XavEb27WAZpT Mj/AE64Tp5G8AwqBmxRoXiO84aiaR+6woEQ4tEpES1ti/5lnzWXkwRLzDKSOHEg5 vj0Y5j+KqJf8IjIy8r/nTCScqebrZgS7TIl6TLy/mO9Jh9xwPPhj2WEWJo0wLKc1 CD8JLXms82X6NUAdEIVWsVKwj9LzajBqO7avJMWlLPBDCcHi+0EUEqioCEQRy/vs LaGipOpUCUpgO6/6LKymUcoTcBAhsaLpCTF7+AKd1XFDaG/+XoFMXFjTXQckkwsu 8ulfasMVIldkC/MJiyKZ =/X3r -----END PGP SIGNATURE-----