-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 May 2017 14:03:02 +0200 Source: tnef Binary: tnef Architecture: source amd64 Version: 1.4.9-1+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Kevin Coyner <kcoyner@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: tnef - Tool to unpack MIME application/ms-tnef attachments Changes: tnef (1.4.9-1+deb7u3) wheezy-security; urgency=high . * Non-maintainer upload by the Wheezy LTS Team. * CVE-2017-8911 An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. Checksums-Sha1: 1384b3d826a84ce211702e21e483bfa3848a92f9 1879 tnef_1.4.9-1+deb7u3.dsc d42ccbe3d41e797fb4133f2e01120680101e8782 3952575 tnef_1.4.9.orig.tar.gz d0fcf0fe921b4d5b710b145f00d6e7aca5af4dc6 7758 tnef_1.4.9-1+deb7u3.debian.tar.gz 5acc4355189e9fe25e1f5eb2c0f0d5db726e74b4 54028 tnef_1.4.9-1+deb7u3_amd64.deb Checksums-Sha256: e074c5713d768dd36e90b665af00f80665eeb365628126ec880db25603cb8939 1879 tnef_1.4.9-1+deb7u3.dsc c4d64ec48f79681a11ee45b38c6b2177ce2d0a8c8f99733e90d462bd27eee6af 3952575 tnef_1.4.9.orig.tar.gz b2c7319bf7c802d4714fb433463150131beae7fbb70e2400eb5767ecb50626e0 7758 tnef_1.4.9-1+deb7u3.debian.tar.gz 500212410d620f2ee907efd36abf7aa160640846077539bb6227d4b1dd027aad 54028 tnef_1.4.9-1+deb7u3_amd64.deb Files: c86ae9445a196b593fe0b0f604f3ea9a 1879 text optional tnef_1.4.9-1+deb7u3.dsc 83a3a8fe0c15c9bbe2a8dae74c46b761 3952575 text optional tnef_1.4.9.orig.tar.gz 21ca8105493d0388bbc012411273210b 7758 text optional tnef_1.4.9-1+deb7u3.debian.tar.gz 11e49bd8a8e12b5a4a851287932aca96 54028 text optional tnef_1.4.9-1+deb7u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlksIjFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR9x4EADDl74jp7w9m/jSy4JfgDT8Y2zs0kjP HOl433+BqCUncg2+cr3GFOSBN4628Le0G842N5x95codW7CVWSdLVV1+FM0ZC3PV ssZgL/aEQXSjLX9rZkNTn5/BJwUDU1p09jpqOyvSf+5kIm8UVLgVIXOXKAUVOi/D k0/Fr3JgFMap+oRdrftCTH8oS+N/B8n581DPh1/2fvWo4op0m3NALM7t3N24rurT A28jAur1iJFzMUf7ksr2cppUjokJjOsibsALjPKbtZ1J1vq8PrGvH4dMxab5cq/Z SxQM8RDkH6uWzTm6ZqlwtA5FIU7deOfaBPrG/8IrJd/tSXM8jQSTSWrQfluE7e8O tapoiu2J/9GzngDW4Z6kJby9WbQrUodhZc9xeINQ5rMiRJU4Y8BIUqJLeCj5d3KI OvV6mciq8OGCLS1TXs+7LG9cpxO4rtYVd2dt/wugNDmEmGOFQ1sgXpbbpxBbsZRw Rr3KjqPMdEvzA5eMjO3spSj907QnI0sVkt44zzVeAmPDz8pVkAFbasPuJG20hTpb lVYiFMoAnCumow9LEa5tiueornCScXWw6kDYXGNKtYC0W/a9zEzjTC5AOymKun6z RuDg3ulg8+fDmZbipiD1nzdqut3zhXQMtJ1L7f5vrUJkOw2sRPkuvVoGJ5ksDTgs 9LcGLoSvQ4l7aQ== =KKHm -----END PGP SIGNATURE-----
