-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Dec 2016 00:26:58 +0100 Source: pgpdump Binary: pgpdump Architecture: source amd64 Version: 0.27-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Jose Luis Rivas <ghostbar@debian.org> Changed-By: Christoph Biedl <debian.axhn@manchmal.in-ulm.de> Description: pgpdump - PGP packet visualizer Closes: 773747 Changes: pgpdump (0.27-1+deb7u1) wheezy-security; urgency=high . * Fix endless loop parsing specially crafted input in read_binary. Upstream commits ece39dd and 0c306f4. Closes: #773747 [CVE-2016-4021] * Fix a buffer overrun in read_radix64. Upstream commit 6e15953 Checksums-Sha1: 3378982970abb2dc5a805ed63883fa17d146f1f7 2013 pgpdump_0.27-1+deb7u1.dsc 82bbe0a09f8edbab14887304d9bc22da850deced 62360 pgpdump_0.27.orig.tar.gz 31b622166b99e0790948c772ba1c24415b32fe54 3411 pgpdump_0.27-1+deb7u1.diff.gz 71b539d8431d5ddb159e23c71a0736faf9f330f8 21804 pgpdump_0.27-1+deb7u1_amd64.deb Checksums-Sha256: 3104a23cb63f946beecb8d5ccae77f896c69f44b3e00bbb76bfe9d8541a961e5 2013 pgpdump_0.27-1+deb7u1.dsc 5dec0bc05391df57c8f8547781a0445732c6204543c3dcd0beeeb3204a134cc9 62360 pgpdump_0.27.orig.tar.gz b037779461f3e888522aad0c983255e1262d76eb9c181be3e86e55240be9307e 3411 pgpdump_0.27-1+deb7u1.diff.gz 6158a76ff45ff3bf463e456e905cf7c77636c2e2f49078eeecc38b68d965aadb 21804 pgpdump_0.27-1+deb7u1_amd64.deb Files: b16718b90c1d55082f15d55cefa2e050 2013 utils optional pgpdump_0.27-1+deb7u1.dsc 3ee1c5cf364f0c37d8bdb04ffbbfb1f4 62360 utils optional pgpdump_0.27.orig.tar.gz 2906eef67c0411f0c66a214583112d22 3411 utils optional pgpdump_0.27-1+deb7u1.diff.gz 3c3183ef455b4689667e5b89172a09b0 21804 utils optional pgpdump_0.27-1+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlhmxCtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EvfIQAJFLcAwq3IE1/mWKgiW8DL4dcKceyD3X bpb5Jsa2WdzrADtcl2STzUx95ay9dJ2Og4BWj63F0ZON8OIGmvzMgED8PXgRnDa9 ysHfK5mUE7HXf8xBtfLmxzGvPxNz0TFQXf6GWy7VSBAEcvqG41gh4ohRhB3fQWpQ 9h6iF8ZNvGWokXO55zobDfofoZW5BbCIxM6u994qCaJ2Oj70sS5nXwyOwm50qTlJ LL4N7sA+u+DqqlXIMs3foktx21sa67YWx2E0d5L2B9ip4wemNLRK36R5byiB/IWh 1UnUfCLs8iiGdpr/v7EvfQq11ipN7pjOkz0Nnu2B4tT+4oMWVOfbj2/iFIQWWxV+ GqCBtVXsig46RHyvyPh9Rrze/VGeThON9qgHRNnNivrNwSQ9aWgMP947PWwNpj8+ mkcz96F+P8HoEgk01eULUydFrfULb2FsEDeUU/BZbq5pxgrXP4AToe1lYqV/+WoA X2GelMjBodX9EbTo4kZ+X5lwiO+EQo4595mTSLkq1KOE3O4EC647o29ojQRdOcdO MUArbnwqtHlRwALjZ4g6Yc/hiLXdUyIE60xlzqfkiFPpv5qbps9vaKZhhEQaeiPP +i8LFsxlF1ziiBi9Gt9NMZEY3CfXfNN6zse0fx8qG14dHz1C7dGvbmY8Jfg8svfH 3BcWDuFMAqCC =VoIq -----END PGP SIGNATURE-----