-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 28 May 2017 03:26:07 PDT Source: libonig Binary: libonig2 libonig2-dbg libonig-dev Architecture: source amd64 Version: 5.9.1-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Jörg Frings-Fürst <debian@jff-webhosting.net> Changed-By: Jörg Frings-Fürst <debian@jff-webhosting.net> Description: libonig2 - Oniguruma regular expressions library libonig2-dbg - Debugging symbols for libonig2 libonig-dev - Development files for libonig2 Closes: 863312 863314 863315 863316 863318 Changes: libonig (5.9.1-1+deb7u1) wheezy-security; urgency=high . * New debian/patches/0500-CVE-2017-922[4-9].patch: - Cherrypicked from upstream to correct: + CVE-2017-9224 (Closes: #863312) + CVE-2017-9226 (Closes: #863314) + CVE-2017-9227 (Closes: #863315) + CVE-2017-9228 (Closes: #863316) + CVE-2017-9229 (Closes: #863318) * debian/control: - Add myself as maintainer. * Add missing debian/source/format. Checksums-Sha256: 2d716121b98e6440ca24b1d18bbc7d6651c56801c7f7831e51997ece0654f7e8 1848 libonig_5.9.1-1+deb7u1.dsc dea155a7cbb4be1a0c3b7bb99fee64ca63ae577adb1170bb2e87e6bf3559efec 5591 libonig_5.9.1-1+deb7u1.debian.tar.gz b1d6ebc7145e1e58936362619328c4436a874a30487160cdc58b4fb73fa4e620 148402 libonig2_5.9.1-1+deb7u1_amd64.deb e3f1702093b131dd068b1eaceb49e6e5e5e49bc2ffcbfb92ee2685519b8445a0 188588 libonig2-dbg_5.9.1-1+deb7u1_amd64.deb cb91cf9e8d1f2fc1d0320736571130e62d93479214b2185ba55f7f71239ce98d 203152 libonig-dev_5.9.1-1+deb7u1_amd64.deb 02686bc223b0c90c348e379e5688a1d9045398ea2ec8e0da28b3b919a1989cb0 586578 libonig_5.9.1.orig.tar.gz Checksums-Sha1: 2ae81a1feb9b3d4afed8fe5c3f7944d3469f1824 1848 libonig_5.9.1-1+deb7u1.dsc 0a6841d96704cd443a874f14b3ee43f1809891c3 5591 libonig_5.9.1-1+deb7u1.debian.tar.gz 34e814ba8a4d4eda453ffed4c3c1ce2b20f64e5c 148402 libonig2_5.9.1-1+deb7u1_amd64.deb 428f648fab7f2f31b1a86ef9e9d842a12fbdd848 188588 libonig2-dbg_5.9.1-1+deb7u1_amd64.deb f38b09ab02f76bbe70dbb92b083830f6ecddc15a 203152 libonig-dev_5.9.1-1+deb7u1_amd64.deb cb1021f20e97eb0bfa659c7f9b7300c3f8360279 586578 libonig_5.9.1.orig.tar.gz Files: 2be7ecf0448c8ebdf6a87a7351a38952 1848 libs extra libonig_5.9.1-1+deb7u1.dsc e92661c0a51c288d337e4bc691f8fe78 5591 libs extra libonig_5.9.1-1+deb7u1.debian.tar.gz 515d22973dfb6937dab27cd13571667a 148402 libs extra libonig2_5.9.1-1+deb7u1_amd64.deb 83978178f3bc240f6f2ffff827da8081 188588 libdevel extra libonig2-dbg_5.9.1-1+deb7u1_amd64.deb f5ac8f8c2edc2c803122816d74007a7b 203152 libdevel extra libonig-dev_5.9.1-1+deb7u1_amd64.deb 5ce5f9bba5e83f0ea6ec24e1ac77091c 586578 - - libonig_5.9.1.orig.tar.gz -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE1TqBWjy3ZZr4guOVju3MG6ofMv8FAlkqpdEACgkQju3MG6of Mv8oVw//RLxUGjHNl6zz4xBhmi4h+32y5oINzm/uRITLYHuEvbuNJHyOrFT6w/sm kmELm5x3S6NpYBokdohDF8YEHbPuHWeuA5ZsStljeajtRBIjaHYGwc0+C8y/aWaY Fxj+/19oyWkVrw4EkwRmWN8bJx63y4QysCPntnxJ/OE+ZtvZ3sBTxQNhxzL33o1x yhEVrakPeO27LIA560Urdyse8iUYZqZTy/CIOe5ieVaUpPYFadHYotK4jRBpqhON X7QWhze+QNNI4eg/WYrwk82I25t2DL/elB9RZCBFUzUTuM8eYZYQPSmqVc32rRuh jfUDmLVV/RtqDAgsLx2m7FRDCP46y4WA7CMeBLprIkZQgPHLp6H6vV5UGh8NUyl/ g5HPyGBeHLq/Ee/enTgq4EUyIOYjR0fdcXhPpzEKgUSjjwIi6d9uIIuUVgEWdOMB eeuolOdceXsNfq7sPTMfixjZjuvQvqq92K03KBegabcCgj0wIKNb/2KVlseJqpZq fRN0PQ6i7oUErRQrY3O1tKhzMz6W9X11sqBYlFbh3M8DiKTRn8U/HAtN21vBfITI OGn3c++OAMf/ITc5r1suoHx7i7LgUVXubQ1NFPcKIRHMt5x7eDhIPYP18CNElP27 GFqJmcqa13bYqhR189WZFLFgNb5gRUbbZcmsvAMcxGJ5N2DhZ0Y= =e91o -----END PGP SIGNATURE-----