-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Oct 2017 23:53:49 +0900 Source: shadowsocks-libev Binary: shadowsocks-libev libshadowsocks-libev-dev libshadowsocks-libev2 Architecture: source Version: 3.1.0+ds-2 Distribution: unstable Urgency: medium Maintainer: Roger Shimizu <rogershimizu@gmail.com> Changed-By: Roger Shimizu <rogershimizu@gmail.com> Description: libshadowsocks-libev-dev - lightweight and secure socks5 proxy (development files) libshadowsocks-libev2 - lightweight and secure socks5 proxy (shared library) shadowsocks-libev - lightweight and secure socks5 proxy Changes: shadowsocks-libev (3.1.0+ds-2) unstable; urgency=medium . * debian/patches: - Backport a few patches from upstream. + [c67d275] Fix potential local exploit issue. Thanks to X41 D-Sec GmbH, Niklas Abel, for the reporting: https://www.x41-dsec.de/lab/advisories/x41-2017-010-shadowsocks-libev/ + [b3f3b58] & [f19a96e] Fix two null pointer dereference. Checksums-Sha1: daa0a83be062cc5817b14f4c5d674fad190aac07 2406 shadowsocks-libev_3.1.0+ds-2.dsc 8fb13064444e9823e69e2bcab9e45ff56b887ecf 16304 shadowsocks-libev_3.1.0+ds-2.debian.tar.xz d2fb579402f7f3ff2a43867f4c35401b1157f3c7 6852 shadowsocks-libev_3.1.0+ds-2_source.buildinfo Checksums-Sha256: 7b6acce07014d0a8ead4390d0c6e6ba15033bca693118e422b8d200a36750e35 2406 shadowsocks-libev_3.1.0+ds-2.dsc 7a8c762a11d0887a74bcc60b6987cccbd5b8ccf09e63dc33bb60e29cd1d256ff 16304 shadowsocks-libev_3.1.0+ds-2.debian.tar.xz 4e69819b9da04c2bbb7be21617b84c3fdd61eaec6bcfd46e7e4d5c9158c0d56f 6852 shadowsocks-libev_3.1.0+ds-2_source.buildinfo Files: 221206a4d805287cb2b02475779a86e4 2406 net extra shadowsocks-libev_3.1.0+ds-2.dsc b5f83098913f388c174623be2235348f 16304 net extra shadowsocks-libev_3.1.0+ds-2.debian.tar.xz 23344ce955461d4acdb39165a1d79341 6852 net extra shadowsocks-libev_3.1.0+ds-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJLBAEBCgA1FiEECjKtvoA5m+cWOFnspHhrDacDNKgFAlnnazgXHHJvZ2Vyc2hp bWl6dUBnbWFpbC5jb20ACgkQpHhrDacDNKhOVw/+LDTtCdYqgk7VfsiHnczoz+ja FhdulFdNEV8Uua4l52OQaDQv1PbpWMB6LDh5AkL5/KcBSqp2lDjkMiWTpdsn4PNJ rUYohH9uS6dpPoVvsqNEAdUflCaD2eSUVQ39+EE7tx1zgb6sw8Vde7IbY6exN6rD xv1kiy6jS1AFub4zMqUZ1MSbU/h45hyScYIR6hd3LdtcKWkZk5UYqQGXpopFT+KB h2AoE4cDlNztSA+TqtdzpYsBjGd+il6ZnAA9+A3hLrLExXCPx5AvLESiBtTKxH9k UTdPOj1QUA1aUZ1EJBFIVJBY5b9aXdnyTbd7jo6SkEJQGMuCqPmL//aNfKr5wdOn BWqx4qKvw4ZKpdcZgiLS3h9nLcEAYgxIIXa8GsrDgCXznRpi10+IvAoxhRgjPPdz aEu/NSnEaIpQfr/WOe8Y9QokQoabl7bNR27gMbav8quBPgjga0fyNtIvG5oSYxXe nJ7NIAcWsU4hD4ePx8OmPpJCjQyf3gJfyJGxqDh7xwd9slCDMCvkfZUn9M75eEaR W4Fz06AErHzJX1sHP5paiYNpsEUSANQ838oDMlNCf5A96yepVPpjlAzZjJkFA0Tk Va1phy8aAiFsdUt9ESs0vg60MFpiZU/fUB2UhFjaOk18hh5DXsZ3RQtWe8YlR4xo QKzqvZjT4zAOuleNMYk= =2deF -----END PGP SIGNATURE-----