-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 31 Jan 2017 10:25:56 +0100 Source: libarchive Binary: libarchive-dev libarchive13 libarchive-tools bsdtar bsdcpio Architecture: source Version: 3.2.1-6 Distribution: unstable Urgency: medium Maintainer: Debian Libarchive Maintainers <ah-libarchive@debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Description: bsdcpio - transitional dummy package for moving bsdcpio to libarchive-tools bsdtar - transitional dummy package for moving bsdtar to libarchive-tools libarchive-dev - Multi-format archive and compression library (development files) libarchive-tools - FreeBSD implementations of 'tar' and 'cpio' and other archive too libarchive13 - Multi-format archive and compression library (shared library) Closes: 853278 Changes: libarchive (3.2.1-6) unstable; urgency=medium . * Add debian/patches/Fail-with-negative-lha-compsize-in-lha_read_file_header_1.patch - Cherry-pick upstream commit 98dcbbf0bf4854bf987557 "Fail with negative lha->compsize in lha_read_file_header_1()" Secunia SA74169, CVE-2017-5601 (Closes: #853278) Checksums-Sha1: 3b05f9f5c5748ee3907e2b7922ef6ddfc553156b 2457 libarchive_3.2.1-6.dsc 81f22dd6ed3e3ef65b2263391327b011dc526d8d 27476 libarchive_3.2.1-6.debian.tar.xz 6244f6e6aa852a1a1648bb250fbff52ff330b22a 6855 libarchive_3.2.1-6_amd64.buildinfo Checksums-Sha256: 64370e820af85934298b8e782444877fb921b1897a760515d2f6cf00f1df32fd 2457 libarchive_3.2.1-6.dsc e986eabc6b6ee55f09cbb69c99c9b5cc89f8fe271914e6788538d76185e2723a 27476 libarchive_3.2.1-6.debian.tar.xz 95f02454244aded3d3d8612ea92423cf075505346216bcaca613216243471237 6855 libarchive_3.2.1-6_amd64.buildinfo Files: c0690465db8568cfdaee9ef7286f8fce 2457 libs optional libarchive_3.2.1-6.dsc b44dbe9e4c1419f14f63088d5d61fd5c 27476 libs optional libarchive_3.2.1-6.debian.tar.xz 776dc2c8f2d68ebd9b1f502b2602645e 6855 libs optional libarchive_3.2.1-6_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAliQWYcACgkQC8R9xk0T UwYF1g/7BEoDkZrjrsgHhxB8TIXlhT8XBuD4A1LtFyF9GPG6dxPZTWY2VJO3qFWu finpCObBgSu9chmZ38uEFegxLuYSpTvbLGNSZmKUl0tOjZQr8CMAwcp8olj/8TiF 8Cv+654LnS7SAq8pWp1x6ntiAjFyAMN4+WYYZg/jT6/0Pe3z4G8w8kdDs6l25WkK tzJ5QmAWUE3H5p6v+PLELOexq9T8UDQHpYqhavo7fgq+bxIx8+KKaqO2brxKMsBI q7OPRdw6F6nSQR1qI2YXuX9BcjkP/pcqp6Oj83Cbr6OyZV8rClCMI3Etj9F7a+7a ENY80S8ZKmqVeN0QmJaIl4gsaawLZlr3M/3x/8VunW1uxscm6gM2//eBNoyzxM5a 2h0kPYs73vPjgYYGsYQ8X12p16lY8EsxtylE1nWB+R2YWhLuqDCF3uVNX0T0yzCN QXDhyzP1WepfqwRUjHdVeVdOuZOKxJ4D+Xhh2ENmoCy3bGNS6lDjBJfXWwhT+bDz JjVDTdy1PxhUSfWqW4YVZhGbzged2v2IeokngOOHAhYho6Vq6hbtQ4kftGd7MRyu xDZtmBCcwKHgBhXFQKR0p3f07zIwb4z5VyZAlkuuQY8dbL9yBxXBrhdajdWyHEIE f7bQYQR28FaaZhCB9YWQAck1Wq8n6ZCm3tYRwXeRUPSbEHEcFMQ= =WNdk -----END PGP SIGNATURE-----
