-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 10 Sep 2016 15:20:27 +0200 Source: libarchive Binary: libarchive-dev libarchive12 bsdtar bsdcpio Architecture: source amd64 Version: 3.0.4-3+wheezy3 Distribution: wheezy-security Urgency: high Maintainer: Debian Libarchive Maintainers <ah-libarchive@debian.org> Changed-By: Jonas Meurer <mejo@debian.org> Description: bsdcpio - Implementation of the 'cpio' program from FreeBSD bsdtar - Implementation of the 'tar' program from FreeBSD libarchive-dev - Multi-format archive and compression library (development files) libarchive12 - Multi-format archive and compression library (shared library) Changes: libarchive (3.0.4-3+wheezy3) wheezy-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2015-8915, a out of bounds read using malformed cpio archive. * Fix CVE-2016-7166, a denial of service bug with gzip quine. Checksums-Sha1: 54e78bcad48ab94ecb7613d717bffbc2242d7db4 2282 libarchive_3.0.4-3+wheezy3.dsc 81bf817aa512ad67af583c7a2dab79743e418899 3632806 libarchive_3.0.4.orig.tar.gz 20b69e56483119e621f5ad489a3b6722aa7c5191 30076 libarchive_3.0.4-3+wheezy3.debian.tar.gz 96fa549496052d3096c06cd99f254725a8be02ea 768560 libarchive-dev_3.0.4-3+wheezy3_amd64.deb 25aa1f26d486f4bd377e716ca3dd598a5327400b 598634 libarchive12_3.0.4-3+wheezy3_amd64.deb 86bbef195cc3555a7da15464b34a4937a80135eb 55446 bsdtar_3.0.4-3+wheezy3_amd64.deb 81776df29430ee7b9b29d6feab79b47422fafc41 41948 bsdcpio_3.0.4-3+wheezy3_amd64.deb Checksums-Sha256: e5090e259b3cae906518935e52e5a9f42253efaff2bd99a4718e96173f00c8df 2282 libarchive_3.0.4-3+wheezy3.dsc 76e8d7c7b100ec4071e48c1b7d3f3ea1d22b39db3e45b7189f75b5ff4df90fac 3632806 libarchive_3.0.4.orig.tar.gz 32d34b1763270badae66d94500d9358b0e0edf09a3b75814cb14dba175f5b4df 30076 libarchive_3.0.4-3+wheezy3.debian.tar.gz 01037bdbc254db33963237b6758b15708d4663571e694a22936118c17934fe77 768560 libarchive-dev_3.0.4-3+wheezy3_amd64.deb e52fc749765826205c886f7c8522d89c118bd39c2de6727c2de38bc251d21393 598634 libarchive12_3.0.4-3+wheezy3_amd64.deb a3e86dda31f94d666cfae1f307bc611f1c488b68894680600675be2a881f52bb 55446 bsdtar_3.0.4-3+wheezy3_amd64.deb 69c69b880ee3a6ebd675b454401a5cf96d58fdb41d23e007914b191b76d6aafc 41948 bsdcpio_3.0.4-3+wheezy3_amd64.deb Files: a19f14189ce0810cf8bb4728654b1d38 2282 libs optional libarchive_3.0.4-3+wheezy3.dsc af443ca9a10ddbcbf00f7ae34ca7fc16 3632806 libs optional libarchive_3.0.4.orig.tar.gz c689247597535559e46192f2fc994835 30076 libs optional libarchive_3.0.4-3+wheezy3.debian.tar.gz 48fb13ac17f80d6c70a6fc784e6e4216 768560 libdevel optional libarchive-dev_3.0.4-3+wheezy3_amd64.deb 2fef0a74a3ed05c81b3cbd0551c9d933 598634 libs optional libarchive12_3.0.4-3+wheezy3_amd64.deb 0f111912994992862d6a0137d2971c1c 55446 utils optional bsdtar_3.0.4-3+wheezy3_amd64.deb 15f49859ec81a1e8b8f8d71aacf08f4d 41948 utils optional bsdcpio_3.0.4-3+wheezy3_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJX1CnEAAoJEFJi5/9JEEn+DvEP/1i/D4mc1H9bkvjpmvwSDtlj 5fk7AXdOKUrne9YgaPFGg6zwnB8/sbrPTfV4v4h5KZEYEqDEEDMw9L3P3kEuw5lN /ZIkLLHdVLPTikyE/eVhO70tLHhzlGw73s4QM8Uh/TUc4eget7zb04epLN3O0WRL m+9k02EKUKBOuCGqYiKOJjzc74ZXHArB7AZeLdDIf4/rFFOb9cQ8O28M/zg9WNCR ddyNN2bFSEPsB5PRicTqfSgd3Dmj1nsZgxmr3iagFLS6dZwBN73IufmwoPIXt0u1 pe8NSkdROkZ2odKKCPb9s1a817LeHRVyUR8r4w82auxaymyroXlgf8IhI2KRZ/8g rOMX8kYtybaPpzJ5I8sdh0pd6n2ucJMouRBzXqR6aQYPSpB9weUcMi2ZuDsI+fJ3 029w3NQ7wgvQXQW+6xAe6t3R8MvIXlb2tldlN1l7GF17JyfUdKR5INd7L2xJ9ZX2 10y80f/p/fG0nmDEODCUPBOEcucV2TGPwpW3NcXMHbmNjMrw8CHTE6T1Lq8Ng0XH fbc9PpPqfCANPdKNhWxRMxfZVoeCW8nhSMm64EryV4jYucL99vjJYU+3v6WTQnso EjMV/JjYe5UjX0k+K9wCOao4Ci7xyYApPyeeFmtZX4g53x7I6IML0j3KNHL7z3Gw HdGat7Cv08x9Uq6SYN5Z =EF4y -----END PGP SIGNATURE-----