-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 25 Jul 2016 23:29:13 +0200 Source: tardiff Binary: tardiff Architecture: source all Version: 0.1-1+deb7u1 Distribution: wheezy-security Urgency: medium Maintainer: Axel Beckert <abe@debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: tardiff - Tarball comparison tool Closes: 802098 Changes: tardiff (0.1-1+deb7u1) wheezy-security; urgency=medium . * Non-maintainer upload. * Backport changes from 0.1-2+deb8u1 and 0.1-2+deb8u2: * Add patch to fix miscalculated statistics. (Closes: #802098) * Add patches to fix two security issues: + CVE-2015-0857: shell command injection through file names + CVE-2015-0858: /tmp race condition in handling temporary directory + Add new run-time dependency on libtext-diff-perl. Checksums-Sha1: 5e233d5d29b7d936abb362c9e61748839958d9d7 1802 tardiff_0.1-1+deb7u1.dsc db646fcda7bab800ebd6e41fb0e64f79c52375fe 4814 tardiff_0.1-1+deb7u1.debian.tar.gz 2c73fa269f2147d1dc05514f28b5d11e05442f44 5312 tardiff_0.1-1+deb7u1_all.deb Checksums-Sha256: bb17be0ef7297a38e9584d43640275b7d7d28aeb156446d135dfc14c9e701d50 1802 tardiff_0.1-1+deb7u1.dsc eda460ef46f08e176fb0905b257847cdefd4d169f38b5916405b2689eefd1932 4814 tardiff_0.1-1+deb7u1.debian.tar.gz bcad30171801fb7a2376494cfb61673a82da12b10fa8062e519d272d4b5341a1 5312 tardiff_0.1-1+deb7u1_all.deb Files: 3dc075e32a06ba13e0c78df0addda6d7 1802 utils optional tardiff_0.1-1+deb7u1.dsc 0c65a5b7c54305b1e2d81fdaa2045d82 4814 utils optional tardiff_0.1-1+deb7u1.debian.tar.gz 38599d8088a30476e914cb9dec42c5be 5312 utils optional tardiff_0.1-1+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXlpP3AAoJEJ1GxIjkNoMCw50P/RutFVlVKAgBnoEU8tWR4gN3 HgtJO6uxS9dTkNoLd2rXePn1Qxk42Wc5f5tIvtPQJsEfDtY3OKVeIWZwR/TU6KHd nG9qIHKkxaEetsH7Rm9uSQW8qvQvhn4+ej5bO4SqNs31lMKK+K4YLPirnWYIRWo/ d4G9kAG2bPablm2DpdtpnSKU65Q000fnZ5gOX9zdX7waeOGWZaqJSyGVDhTxpLIn tdFXql13VrdiRzNYMNV6yzUu3axra+mIaRjjOJTs0Fp/eT6yjvtnyLMRanI6UCC5 oFBbxEinQaxkIHZM/iT2z4fZ9QTmkyzGAlAVlzY5LyCoeuMPMej4nUq2tsTYWqX4 ftp0XZumcAJQZsFjMpaLrJ7a34nLyFVdJvCwyXXSH6t3WYSzPV3pUyOzSl+2L+O3 nJHLsZUua8CdeZsMFltjHJPjjUJCNA7nPcDEIxoUhE1Bawyr+a3zbgzNwh/M+sWl 3qGvgPZjj+nb3iQ1XNXH+v8+UrtWny7G9xWNsFfXmCqnK0rll9JvBTMPByXb3FA/ lDIY8J/EU2l7mkWdsmGPp5QTLLmxBcThrb0n356usXWGRn0X+MV8Lzc0W7RC3Wih +Ye+QoxommS56bOfMc5b6nKKfRzMhSZeM9PwhDP1/hPTh8PkhCCRcwrV9ADpiGbK SkeRDMfPqfDLGWm6utva =ZFod -----END PGP SIGNATURE-----
