-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 26 May 2017 18:31:08 +0200 Source: rzip Binary: rzip Architecture: source amd64 Version: 2.1-1+deb7u1 Distribution: wheezy-security Urgency: medium Maintainer: Alec Berryman <alec@thened.net> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: rzip - compression program for large files Closes: 861614 Changes: rzip (2.1-1+deb7u1) wheezy-security; urgency=medium . * Non-maintainer upload by the LTS team. * 60fill-buffer.dpatch: Fix heap buffer overflow write by allocating a large enough buffer. Patch taken from openSUSE. Closes: #861614. (CVE-2017-8364) Checksums-Sha1: c2dba6caecc1fb1ff5a3d879817cc199e8a87966 1639 rzip_2.1-1+deb7u1.dsc efeafc7a5bdd7daa0cea8d797ff21aa28bdfc8d9 46785 rzip_2.1.orig.tar.gz 003c3e06346df9577f46dd16bf99881edecd5441 7248 rzip_2.1-1+deb7u1.diff.gz 4e7b879c3670369b2d5a1b11e0aaf2f61e6230e7 18902 rzip_2.1-1+deb7u1_amd64.deb Checksums-Sha256: 3c7ae24a7b07d1696cf794c1b1c706e7ddcf80a6ee1857e38c0f2d5a1662f8cb 1639 rzip_2.1-1+deb7u1.dsc 4bb96f4d58ccf16749ed3f836957ce97dbcff3e3ee5fd50266229a48f89815b7 46785 rzip_2.1.orig.tar.gz cb8a2b5976d8293c8b05c4c7e330dddb656537d97ed7184cc8033ea82c972d99 7248 rzip_2.1-1+deb7u1.diff.gz 8a331e095cf740a3bf2b50560d277d2a17b0745aa72138e90db6e67fc3db4425 18902 rzip_2.1-1+deb7u1_amd64.deb Files: dda6def08a448af22b7cdae9051c891b 1639 utils optional rzip_2.1-1+deb7u1.dsc 0a3ba55085661647c12f2b014c51c406 46785 utils optional rzip_2.1.orig.tar.gz bd05cde8bd712fd7548c5731ac89c7f3 7248 utils optional rzip_2.1-1+deb7u1.diff.gz 6b18f0019c7ee68d6cbe4f85657e08dc 18902 utils optional rzip_2.1-1+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlkoYNIACgkQnUbEiOQ2 gwJSOxAAk5dNRlBRf7u2ftwyhm9RH4wkLsu676RhoHgt5leUTkv2nu+cvHop1Mta 3WxTLZXbEPLk7+ma0Hj+cqzIffZFkAQkh/49Lfk0XaNWPSV4BNV3s3X+mjkrUF0s 5fH2ETrMwgl1nYVgLZDvgMU6NNTW/LChH6bQsnf7ip+9Duh0wUjmGmef4Zk/HHhF LN51ftk/PhR/G9MNjfHP9j7MFgG7Sv6mJ5xPG8w9YuQ7Vo7dLLlyLcI60VevLIJB fgEu/a1t0dzr0aJ9qlWaJl4UCcGhrocgi33wGjIFKmrisrWl1SMapm+4zOrhEeAc Td1X9h6hmZ287A/CrrlyjS4AnwzRs7nt5umiDO/HwEf9UumrA4oYEliYLy1K7J1X A/guvPwqd3ei/QpRHzR+McZxfBOppzKsz+Mcf33+dOmwQdV6lOY/E67XwHW8bqmk V3QZDXgMbLZgL7rHDVfKFh/qEqiljLWZVnzcv0H3gBMLLiHxtCk7vEr4p0RLRnNp zUuld7ZdyY6IobQEyTlsSAkc9Fxt838/UpuqAbQYL1F3j4UQ2DV/7OeCKc2Iu6cC XmQ4Qaq5Rphq1Gx7J2rCWYdUPQlAslrwOizp4V2vvFU+RXdNaxbInUx9l8CgqGkG RiQR94d00b12fc180LGCSGLM0IsYguOO8d/PLBULoLv+kKdez/A= =u1k4 -----END PGP SIGNATURE-----