-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 26 Sep 2017 18:32:56 +0200 Source: db4.7 Binary: db4.7-util Architecture: source amd64 Version: 4.7.25-21+deb7u1 Distribution: wheezy-security Urgency: medium Maintainer: Debian Berkeley DB Group <pkg-db-devel@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: db4.7-util - Berkeley v4.7 Database Utilities Changes: db4.7 (4.7.25-21+deb7u1) wheezy-security; urgency=medium . * Non-maintainer upload by the LTS Security team. * CVE-2017-10140: Reads DB_CONFIG from the current working directory. Do not access DB_CONFIG when db_home is not set. Checksums-Sha1: 459ed8b9d5079212c1c4f8c03e81968d47bdf0bb 1961 db4.7_4.7.25-21+deb7u1.dsc 957c10358df1211e1dc37ea997aadef42117d6a5 13124129 db4.7_4.7.25.orig.tar.gz 3e1224e9f2c0e34814de1ed17a644038d4294064 28791 db4.7_4.7.25-21+deb7u1.debian.tar.gz 1a02c4d65652206522f5a25b6b4f91b59e67cddc 777480 db4.7-util_4.7.25-21+deb7u1_amd64.deb Checksums-Sha256: 4172427544a33cb787e9af649b2a61808d762157529c1213a3b0be10d06ce056 1961 db4.7_4.7.25-21+deb7u1.dsc f14fd96dd38915a1d63dcb94a63fbb8092334ceba6b5060760427096f631263e 13124129 db4.7_4.7.25.orig.tar.gz d49bc9838e3be16ffb7f8742b8b8d69ee33a5f0fe1685b1b95fbdca49494a0a9 28791 db4.7_4.7.25-21+deb7u1.debian.tar.gz 9f8df83f12245c360b24ed94deaf76082508930ad31ea7dd2811a0561da36597 777480 db4.7-util_4.7.25-21+deb7u1_amd64.deb Files: b6386fa726a870035f62b8170878b94b 1961 oldlibs extra db4.7_4.7.25-21+deb7u1.dsc ec2b87e833779681a0c3a814aa71359e 13124129 oldlibs extra db4.7_4.7.25.orig.tar.gz 6a6c5667e32db1730e68ef0c20b240e1 28791 oldlibs extra db4.7_4.7.25-21+deb7u1.debian.tar.gz 4ece3952067b4aae99f6ea8ed79922ac 777480 database extra db4.7-util_4.7.25-21+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAlnmSHYACgkQnUbEiOQ2 gwJ7eRAAjhYzR/b4mXPKzp6AelgqQSsdv40YtpzL5UK52/4uVySVYDA1NrDyaN6B ObmgaKTogAwZZoNukozpnPRm7NfW3o4useq1/TkHG+V4nQR1MB+stmSlIa8LImp/ Z5n/g7KdwH0kyBTNOWOSN8Bq6n449IXA8xb2yPhjeGvjV9oR56/PEK7WOAmCH6pC pDhpduqKxX+xXlEKdsQ+y9LlZArUTqtQhTnWlBzNTERYSfRmlq0YW0MspPWBmWny hXkhWQQZXoOf9fdIKQZSfInUXrdZFEkQbXS2n4tM4Nhpnk9hJdjJDBbqCsd/9Qxg A/VBw+GpyhliFG4rhv87/WBAs6baX8N/y/yO2qGeiJOnPaCQMyygq3DFrei9TdvF OdILsv6ZHXrQ1VBDFRFTDd3n0+Q5HsaCiboO902Pi2CIBaTn4T1FY2l9ltKcyJLk YA6UbdocH0v616zOd8C/Y2h6iFcHDU5kBXTR7iTvaB/ph5gYDRFWcz3n6fioiseE 5gphXwxh0Hx/iMfHpXzQkTDFMl/v1w3pFck8SHC6c8slf2EfZBDBzXPYViTDktqX Nt6Uy2zgwFgVopGr3Ka7lbGJRLqsXpQeYOx/8ANz1A9zLip5PH1Qk2w8tkp48mef uDDblWhneJpIgSyRfgnh+a5kJgVASBDUjm7xb7IPpv26B2IplSU= =cBl+ -----END PGP SIGNATURE-----