-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 27 Nov 2016 09:49:34 +0000 Source: mcabber Binary: mcabber Architecture: source amd64 Version: 0.10.1-3+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Franziska Lichtblau <rhalina@old-forest.org> Changed-By: Chris Lamb <lamby@debian.org> Description: mcabber - small Jabber (XMPP) console client Closes: 845258 Changes: mcabber (0.10.1-3+deb7u1) wheezy-security; urgency=high . * Prevent a "roster push attack" [0]. This is identical to CVE-2015-8688 for gajim. (Closes: #845258) . [0] https://gultsch.de/gajim_roster_push_and_message_interception.html Checksums-Sha1: 1817e42debc038ea5b7990fbb8f9d206bb5cbd25 2008 mcabber_0.10.1-3+deb7u1.dsc 55096d1be651ba03388848ebed6fc5bc554ad93a 695342 mcabber_0.10.1.orig.tar.gz ffe2f65fa50b9c1d5f336fa638525beaf525f30a 7544 mcabber_0.10.1-3+deb7u1.debian.tar.gz 4c8f314f655ede4d528b6a4852dcda595c3364cf 295642 mcabber_0.10.1-3+deb7u1_amd64.deb Checksums-Sha256: d3e2f00190222f2aea4294e2d0e38157c7f1f82054a4055b4b0e54295effd112 2008 mcabber_0.10.1-3+deb7u1.dsc 71035a2a3010f3f3728a83e36d7e713fa2b82765c7033d38955b15b9d1f3a47d 695342 mcabber_0.10.1.orig.tar.gz 7140ef50bbd3b60090487a3cdc94718e1aa1785a999a69e62eb2ae439402b863 7544 mcabber_0.10.1-3+deb7u1.debian.tar.gz d74cb414d1960f4b109f45cc545ece658fcfbf7a2435aaf3271459c28e71a225 295642 mcabber_0.10.1-3+deb7u1_amd64.deb Files: d7e676534b6422450b9027472b8f7039 2008 net optional mcabber_0.10.1-3+deb7u1.dsc 2be99cc6ce132165fec9fa1064b6a394 695342 net optional mcabber_0.10.1.orig.tar.gz 4b3082ea5ca0f98dff55e0a03dff2585 7544 net optional mcabber_0.10.1-3+deb7u1.debian.tar.gz afbdab68f42c2f1565b3251143b48514 295642 net optional mcabber_0.10.1-3+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlg6sSUACgkQHpU+J9Qx HljPrw//ZjCxpyxEKDUaUDlssGr5ZQbHfGc0OMPfvXE3GWAbO16JWF5udO81fsgR 6/RIJKhayUqumstInY8xfM6/lCi/rHEgziCGnynAnhsuxuugzwbHVAfqQOBfEkw6 QW2v1CmyOQQNOOS6lX931RsMWU+UitBvDCSDs/CyeTpHg8f+Tlzx9LG5HYKsGJQA 9HLG0Rat2dOEghFurkdW5XtTV3N+vu8nV2mk257GZuno7fIDE7Vt0lUi8ui3acUQ kFR2EDDQxH9WsbchvLY1tGdl7C6gsby6RTvvZxm15SAgP8SqzCGFRqFM/gDoG/3U I50tDrZXHo8Lqyx4Rs8DswYjI4wnftNZeHLhjimhQSc/r8jyQWl7xG68RR5p6VmT Uetbp1LPAN0X3Zz4SuKubX18CeAFyUKVI4bMlU1grH8j+2w8FKJQz4g+Tjc98ZuG VKwX05/9blLobjS3h+aiAfVDWLqDjHkM83Ie1W7bCQoeghxvCD50gA4QCgVO9YDB Q8kJU/3jNMzHLLKZsKCkIQ0Ax87KI4B9UCuVhiC3hQ9Vnx0/IXVVRfgojW5WxxLm /1YxNcdE3s1WfXd8O4klmAvtjWFldja9km/0pKp1gTiIuopiEgkHnwFqWwEgHiAF BSNW+4mT/j5vA8b4bAD7FF+IjNwOmsdREHNr7pDOLYR28mlJfgo= =3Rst -----END PGP SIGNATURE-----