-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 14 Feb 2017 00:05:29 +0100 Source: libevent Binary: libevent-dev libevent-dbg libevent-2.0-5 libevent-core-2.0-5 libevent-extra-2.0-5 libevent-pthreads-2.0-5 libevent-openssl-2.0-5 Architecture: source amd64 Version: 2.0.21-stable-2+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Anibal Monsalve Salazar <anibal@debian.org> Changed-By: Balint Reczey <balint@balintreczey.hu> Description: libevent-2.0-5 - Asynchronous event notification library libevent-core-2.0-5 - Asynchronous event notification library (core) libevent-dbg - Asynchronous event notification library (debug symbols) libevent-dev - Asynchronous event notification library (development files) libevent-extra-2.0-5 - Asynchronous event notification library (extra) libevent-openssl-2.0-5 - Asynchronous event notification library (openssl) libevent-pthreads-2.0-5 - Asynchronous event notification library (pthreads) Closes: 854092 Changes: libevent (2.0.21-stable-2+deb8u1) jessie-security; urgency=high . * Fix three vulnerabilites (Closes: #854092): - DNS remote stack overread vulnerability (CVE-2016-10195) - (Stack) buffer overflow in evutil_parse_sockaddr_port() (CVE-2016-10196) - Out-of-bounds read in search_make_new() (CVE-2016-10197) * Add myself as an uploader Checksums-Sha1: 603384067beef2be03ea1d11cb83ca322f6524cb 2460 libevent_2.0.21-stable-2+deb8u1.dsc 3e6674772eb77de24908c6267c698146420ab699 850772 libevent_2.0.21-stable.orig.tar.gz a8ce182cd465f1c06e0df2e8dd4cc6b33f348349 13900 libevent_2.0.21-stable-2+deb8u1.debian.tar.xz d91f6842d2bc4e41ad30133f256a1538cdac76ef 248052 libevent-dev_2.0.21-stable-2+deb8u1_amd64.deb 9a48b20089d4d36609148b315e5d78c4a72af993 666916 libevent-dbg_2.0.21-stable-2+deb8u1_amd64.deb 8518a9b0898031fc7a3f3ae15efe14550f9f1b93 151710 libevent-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb b8cfdf92439d0a6a7f4e57a2ad5dee765deda57b 107952 libevent-core-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb c482a65c87377f07f918d17d3471a5b55fbb9357 90704 libevent-extra-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb d06ce8d65dc54079874135dd3bbab64c4c214baa 44072 libevent-pthreads-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb 82399492c4935e9e7e16b7b2263d82e3deb3799e 49960 libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb Checksums-Sha256: 54c4e18472229cfc33b4eef8f0e6191ce362cd71ab8995c3b4f6ba79e5feb69e 2460 libevent_2.0.21-stable-2+deb8u1.dsc 22a530a8a5ba1cb9c080cba033206b17dacd21437762155c6d30ee6469f574f5 850772 libevent_2.0.21-stable.orig.tar.gz 5cf722d138ffd789ea54d0b6703e1187bc0170d1580e528d3db635d397f8aaf6 13900 libevent_2.0.21-stable-2+deb8u1.debian.tar.xz d2674d502449ac9873c757b96e2a1b0ee190a919de4469bd8f99c592364e9f58 248052 libevent-dev_2.0.21-stable-2+deb8u1_amd64.deb 8cee4d6475f0403ede467bfab8fdc463131c39d6cff77496f8ae7463b541ab6c 666916 libevent-dbg_2.0.21-stable-2+deb8u1_amd64.deb 3651fc8112c10272d2911f4ce9badd3a2af59d9b8b13aefed24247f3a4ba6105 151710 libevent-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb a9de7ccd5c959e9781c325215e18aa4d2e707bf4d73b23eb2bae2014a8ca5d6c 107952 libevent-core-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb 1d60a8c4e025fcdff3fcdd351cd75aecf01cfe44d1f4843546fb0d372be24441 90704 libevent-extra-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb cc6548255c080077654a9e07cfaf704b40567657224510834af1bcb8a2158f55 44072 libevent-pthreads-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb 9a85c5de873e543360f1c0e6dddc3d2547ffabb41b9d075d658cf3e21c9d8141 49960 libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb Files: 49adb74501073b5771c621fa333c62c5 2460 libs optional libevent_2.0.21-stable-2+deb8u1.dsc b2405cc9ebf264aa47ff615d9de527a2 850772 libs optional libevent_2.0.21-stable.orig.tar.gz 9809cfd91b7a7dd0a6c4a2dc27296e89 13900 libs optional libevent_2.0.21-stable-2+deb8u1.debian.tar.xz 17c6b8e53ba24ab971f75af175176138 248052 libdevel optional libevent-dev_2.0.21-stable-2+deb8u1_amd64.deb 5ade9369075c37948ecf32f7cc8db6cf 666916 debug extra libevent-dbg_2.0.21-stable-2+deb8u1_amd64.deb 4c0719a022bb6126dd3935732921dbfc 151710 libs standard libevent-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb 43f7ccf6e183246b7723e6cd9ae20d35 107952 libs optional libevent-core-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb c0e6268d988a084a6ae032e836dbb2fa 90704 libs optional libevent-extra-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb 17ad653358239ec1e36522a311a2dd1e 44072 libs optional libevent-pthreads-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb a038da5453a3b709b2d6807125db9085 49960 libs optional libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJYpAdvAAoJEPZk0la0aRp9TBEP/3YluKGe9wOPVjztpz6egmYX U8EqPN9hBiARn4qcl/Ck3HJFAJpdxRtiM4RMbYTpYsLf3ZlqB4TtcVyVLKJCrHWv 262D+8GK++6nxLDL2o/jC/CnfXL//rLarXEE7SHrIoLVLw7NXK/PmdX6p6xzPAqh dz/t2zs9rw/AKetFgT1GZ//xE27tkx3SaGrsC6pi4n9g2il4uO6kgPgcpXK+Fu2/ Ia1tZBG52Mo8ZKulRIbHM9KakmmcU0jqEPx3HW/O6Z50IwRbK/cNZ3bX+hx5MSTP H5Ge+iOvdD2UmPl0p9jcWV3GvVFMJBg1QcgkhL0f2l6ugBefROfZp4FuJL7yVI0F Arknb6no9glyyVYLyBz6eRzunxr7Nbgx4wYF+m2kYD5tT07tloqvczZkH3AmwDl+ vB4HB6bbbNZHu8L58oNGhVsGa8OS/sQRlAX3LQ8jqpRfT6D1oZvRcsiHMtC40lz4 CugCn5GC0lU/s3J+BW0yWsBgCJlze92XnzxMpuhkvPouKE+n/fZH90RsH6DNZOif RZPSVs5HUpTIhL8C/ZNWkb1rSQUk8lLinZPKaJSKMimuQBsLVltFaPFWOWJVFdva n1WjtZTt0tLMP8qR5apzAR58CQ+PzKrMUop9g+alWvvB/FqX6AqVPaavYfO4XAZ4 qbhVu3IxtFfPasqkPY6E =I1W5 -----END PGP SIGNATURE-----