-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 09 Oct 2016 17:35:21 +0200 Source: bash Binary: bash bash-static bash-builtins bash-doc Architecture: all source Version: 4.3-11+deb8u1 Distribution: jessie Urgency: medium Maintainer: Matthias Klose <doko@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: bash - GNU Bourne Again SHell bash-builtins - Bash loadable builtins - headers & examples bash-doc - Documentation and examples for the GNU Bourne Again SHell bash-static - GNU Bourne Again SHell (static version) Changes: bash (4.3-11+deb8u1) jessie; urgency=medium . * Non-maintainer upload. * CVE-2016-0634: Arbitrary code execution via malicious hostname * CVE-2016-7543: Specially crafted SHELLOPTS+PS4 variables allows command substitution Checksums-Sha1: 43b4cc9c5f75d3e9fc07f8e2e3c0f5aafb15054f 2348 bash_4.3-11+deb8u1.dsc e4af42286393f34aaa91d88a3142edd348901597 80096 bash_4.3-11+deb8u1.debian.tar.xz 1d35812e53354012a1a85c18fee4b1d1461c26bd 1222714 bash-doc_4.3-11+deb8u1_all.deb Checksums-Sha256: 8433fa4a2bc18f2ca9cbcf7f16ae088a5135b37c9928e64ee80fa6804cb5b592 2348 bash_4.3-11+deb8u1.dsc 6d0ae7d128c742d9f7490993fe5708ed90b2ff40ebab2eb45140805cfa98269f 80096 bash_4.3-11+deb8u1.debian.tar.xz 54cc5bef8c3e70a5059fc877ffaf349ed297979f7807def8bfa20068bb2efc25 1222714 bash-doc_4.3-11+deb8u1_all.deb Files: fd2c82ebdf6816e3a3c57cf0a83ba4be 2348 base required bash_4.3-11+deb8u1.dsc 3bd2f55389cf4060b5f2accbb8763c72 80096 base required bash_4.3-11+deb8u1.debian.tar.xz 295b86a285d8f0c9cca428596e3fe6cd 1222714 doc optional bash-doc_4.3-11+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQKPBAEBCgB5BQJX/HFOXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0NjQ0NDA5ODA4QzE3MUUwNTUzMURERUUw NTRDQjhGMzEzNDNDRjQ0EhxjYXJuaWxAZGViaWFuLm9yZwAKCRAFTLjzE0PPRHSL D/9vZ/SajP3eeLEC+yg3PYwbq9Rx9zyRQxqnKGqUQVlrdLhm1efcJyC3kyKgdFQc orMM2Cg0TLpUVWT7jkC/plW77G3IplKG6E+aM02kV4crWyyY3LoGWFr7LJRX0v33 q8j5e6ad/AM7ReFL/qF7n9Ph+aUtT6JPwVT0I0w/xKifJO9X6Kd1E6qBour+MQBn l+doxhkq0Inf7W05vG1GYaqyu5ShOK4hIGZwRKWthLGFqeEWzwMvB8v6q9j5oGtW rN9GAVRbC4XXLLyByDMZ6nKm+RZALBOI0tflNkq6otRM+pwd1dvKEp61mhWbD9mK w8FVGjsQ9iqyAuMyjfzG/09QEc4pdi+TqDm4hE9Qec55QsAc0bhfdzvGx8QSsm82 9ZIPRmuya+eq9d4c/F9BU1Nb91XhJ+71V8pCiPMCnpS/p3TG034yCxs0fLgL7Vm9 HhQ05tfRZKCtAyqANv7x5+1ewsnvhRFfqHEb9yw0cQ1MDSgH77EovnQRJRNoluVK W+/2z7M4l34PIco7FdQSYYEqM0HNF29WDlXmTrOY7i4jbb1XQ0aUErVYbASVJNyO IGfwxQ7ApiuYosMm8sJAqPj0q5nhouY8stDdotD+S23uMUr5ygSi4yIKehjJOkN9 DqCNd8Nu2oB/ZsBwclv5Y8NOKY49fSyrnep2w2ly+txHlw== =iI6f -----END PGP SIGNATURE-----