-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Feb 2017 18:42:08 +0100 Source: mcabber Binary: mcabber Architecture: source Version: 1.0.4-1.1 Distribution: unstable Urgency: medium Maintainer: Franziska Lichtblau <rhalina@old-forest.org> Changed-By: Markus Koschany <apo@debian.org> Description: mcabber - small Jabber (XMPP) console client Closes: 854738 Changes: mcabber (1.0.4-1.1) unstable; urgency=medium . * Non-maintainer upload. * Fix CVE-2017-5604: An incorrect implementation of XEP-0280: Message Carbons in mcabber allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. (Closes: #854738) Checksums-Sha1: 893b0335f5d8ff51992218ba3861a0b864fb9961 2131 mcabber_1.0.4-1.1.dsc 3ebe66f2ec5855644a8a6a502a5d3e8497dd7fa0 5400 mcabber_1.0.4-1.1.debian.tar.xz 0f9019e0a8187bc321d3c691b2184e9fea0a11ec 6543 mcabber_1.0.4-1.1_amd64.buildinfo Checksums-Sha256: a6581da14a2f622c4b43f98755208d7aab5fa9bf7276bc174af265dd21528749 2131 mcabber_1.0.4-1.1.dsc 6957ab85cd56014434366510e036bb4649164627c6912fdb5dc8db02f425f7a5 5400 mcabber_1.0.4-1.1.debian.tar.xz 0a8953726ebfb069f71d067e870323ccd4dc7208ae27c31af22a911316bc5324 6543 mcabber_1.0.4-1.1_amd64.buildinfo Files: 58c764c11c16f334f797e6c88180d7bb 2131 net optional mcabber_1.0.4-1.1.dsc c15c6c744156e4973b79ccf368136d77 5400 net optional mcabber_1.0.4-1.1.debian.tar.xz e813d2c91818cf300f07a611c536a255 6543 net optional mcabber_1.0.4-1.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlizFYlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkA98P/iNcd8R4Nk6CyNOyq37tb1/gb3Zvd/yjYThG Dk2rfsksf57LR1uMJ1ixuu5zl3xk9Kfcc5oBM2dUUuY5oZzgiq33x4rfRMpuNUqb 3SzP0P63fRcLptvXb0T0VaE/R7vbw58t4kFCr6bALXgOPLYG5JHQPPdQ1tzv9C3Y ynLQ1vphkM5gHHTDzMxYhpRH3yFWpY5oqoOsA3pCa8NYL9U4216HWctyfubtjtMe qoJkZlBdDwIk2wrGXpm7mEwWUrFNVRLt5qmQ+Jp2Q7QR1GuTuOIF7EpgpTAlZjQk b/P2M4wzLrYNdFYM2aAYKpMe/vcnUkZSVN5vtoyBBHO4HCkDVQnxMwZwLjAdwm1f HwQjBn4qIZzUOMmRWL8i1U4YxRT3W//UNoV+W6+2h7eLDjpVZ5UW2nP5ng4nt6uM Yj4lJdeM8btFUib/PSjjnL1BJoeO1M2Rc+1iLHetuRcanuIUCUFBaL2FkMs524/9 QXNo8j/bSODMbY93Pb/j6gMwyUywbzvRcQyN6zM65CseTAW8N8okDyPHQLWo8xab agEQTTb9Wx9YTAhGANrxo2IislXen2voJpsbhrn8bX/RBhiMOQSNZQeLy+6S06jk lqErJDJNogcJgzoGVsevL2e90Ery9iwmK6O6tEONiJvLaBhmAzB1/BhKZo/PqV/c l5Vb7nnc =C5Gb -----END PGP SIGNATURE-----
