-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 14 Jul 2016 19:16:45 +0200 Source: pidgin Binary: libpurple0 pidgin pidgin-data pidgin-dev pidgin-dbg finch finch-dev libpurple-dev libpurple-bin Architecture: all source Version: 2.11.0-0+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Ari Pollak <ari@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: finch - text-based multi-protocol instant messaging client finch-dev - text-based multi-protocol instant messaging client - development libpurple-bin - multi-protocol instant messaging library - extra utilities libpurple-dev - multi-protocol instant messaging library - development files libpurple0 - multi-protocol instant messaging library pidgin - graphical multi-protocol instant messaging client for X pidgin-data - multi-protocol instant messaging client - data files pidgin-dbg - Debugging symbols for Pidgin pidgin-dev - multi-protocol instant messaging client - development files Changes: pidgin (2.11.0-0+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Imported Upstream version 2.11.0 to fix security issues: - CVE-2016-4323 CVE-2016-2380 CVE-2016-2378 CVE-2016-2377 CVE-2016-2376 CVE-2016-2375 CVE-2016-2374 CVE-2016-2373 CVE-2016-2372 CVE-2016-2371 CVE-2016-2370 CVE-2016-2369 CVE-2016-2368 CVE-2016-2367 CVE-2016-2366 CVE-2016-2365 * Update libpurple0.symbols for 2.10.12 and 2.11.0 Checksums-Sha1: 9238e3b35075d7a49e4b8f42aec027476380135d 2852 pidgin_2.11.0-0+deb8u1.dsc 9738a424ac9f6da8b68ebf11af00c55cafd6b4d2 10037480 pidgin_2.11.0.orig.tar.bz2 51bf5cbf3e04dac35f3e3e746c7ca6600b60550e 62040 pidgin_2.11.0-0+deb8u1.debian.tar.xz 7f1e95ba9fae2044a56dc8695ab863bf89200aa7 4920246 pidgin-data_2.11.0-0+deb8u1_all.deb d2094d945dacb2dea1f3a72ad2c801e286635dc2 2316764 pidgin-dev_2.11.0-0+deb8u1_all.deb fb94ef21d72e422fd7c5f5cc8ec211b06afa34c9 143584 finch-dev_2.11.0-0+deb8u1_all.deb 8089222ec3307a76020d59740e4b11c8ee845076 258196 libpurple-dev_2.11.0-0+deb8u1_all.deb d5d28a4c5c4f3a9ede95607d65379a6bfb27b0c2 122022 libpurple-bin_2.11.0-0+deb8u1_all.deb Checksums-Sha256: c3d311a5ef9655611a60668c35f069458f904834ed3498d8f8243019af405d19 2852 pidgin_2.11.0-0+deb8u1.dsc f72613440586da3bdba6d58e718dce1b2c310adf8946de66d8077823e57b3333 10037480 pidgin_2.11.0.orig.tar.bz2 3e842f19cb788552d1f4a963f3efc4b74e311e49d257877f1451d7a2f6923d75 62040 pidgin_2.11.0-0+deb8u1.debian.tar.xz 14f5e82506f3790e70c7fbe262962db8a0f90822b3c67567d57a6aaf6ebafdda 4920246 pidgin-data_2.11.0-0+deb8u1_all.deb d77543222c7aae9a16dd02a01b14a9a79a908d3381f481fbb539a97a436e01b8 2316764 pidgin-dev_2.11.0-0+deb8u1_all.deb 3507aa0c48d225fa2c6ac326a1a925d7f996077f396f4c96b1ff48d4f3b4cb7a 143584 finch-dev_2.11.0-0+deb8u1_all.deb 839fc1173c78ac8080ca6afccdb3694e3f796129fd1b4d9ef970c548c903ac07 258196 libpurple-dev_2.11.0-0+deb8u1_all.deb 9e8a4f85cab8205769c8044451a29ed73e9ec906d26ce9a36a27e51e047e9f1f 122022 libpurple-bin_2.11.0-0+deb8u1_all.deb Files: baff51aeab0499cbb1c0e994b2bf6168 2852 net optional pidgin_2.11.0-0+deb8u1.dsc 7b167474db669aab2f71fa46835fb83f 10037480 net optional pidgin_2.11.0.orig.tar.bz2 32c9feca2d679c94b54fe0a73648d01a 62040 net optional pidgin_2.11.0-0+deb8u1.debian.tar.xz 0009226133640e4c117236bb4196b482 4920246 net optional pidgin-data_2.11.0-0+deb8u1_all.deb 2dff1a804f054be4c1937d7db9c629b7 2316764 devel optional pidgin-dev_2.11.0-0+deb8u1_all.deb 3e287916bb75ba2ca6636630e88bc723 143584 devel optional finch-dev_2.11.0-0+deb8u1_all.deb 0f25ded9ff8bb9e1552c22f7f3324143 258196 libdevel optional libpurple-dev_2.11.0-0+deb8u1_all.deb ac30efc3680c8b6831043ee48eec883a 122022 net optional libpurple-bin_2.11.0-0+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJXiLrnAAoJEAVMuPMTQ89EE2EQAIWgKYDvXc7EAtA2c0UVd7kt 7ZjfmoZztoSDtXCTG/6jQT/GkjCJVJiKbRa0rIetuq0RTil1CuAgbQIuNHhZfLiF TWjxYqHuxCO7+dJt0GQmLhTf7HurMZal6dykz09LufHwHcLN8jZy2EWZ67v0fCCo hpZ98OBAVXuMTLrbiTWg6cv5jYgPRH7lTnYoSNS8nxtHofzaq96yfeC6Gel0Qqnq 8ZynAcRNMgoNnxIxGExep+OEJw1o4QNem+JtKeR+nlpwePyHc3Q9HSh/snYxYOoA iciMxJvhr+PZwV5gL9cieHELT3tFvkyrUZcmFef8J8tn2zZ7iIOCsRg1LBa6DbiT DsxeCbusN2dJ5ijeUXVIDeDnciokDT04TxrGlfddBhceJM0NVauZHq5yajfhpBIG sMqM4nFNf4nb+/A4eM5tAn/LMttGBLrEcpY9kfOACuthbm86t63T6IEzbrcJwfkp LsDBhMWLpH1iH5Up5BLuf7HfC97ElVyq75g8Rom8Y7TMAXSLcvmRAKdxIxs67wkg aZeiyq8sUYEJ8xyGjeZVeNUfevQTk23zxm0Sh62Uw7NOcRbNBVXypEaRGdhJ2eNt tKpC0K/yOFryUj5Ss7IXiuWDPeYzfIqjYkNkx6ko5/11PTpioma/n5cDlaWFGY7m m1vPOf4Wy/MHCpu6lxwx =07f7 -----END PGP SIGNATURE-----