-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Oct 2017 16:44:59 +0000
Source: dulwich
Binary: python-dulwich pypy-dulwich python3-dulwich
Architecture: source amd64
Version: 0.18.5-1
Distribution: unstable
Urgency: high
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Jelmer Vernooij <jelmer@debian.org>
Description:
pypy-dulwich - Python Git library - pypy module
python-dulwich - Python Git library
python3-dulwich - Python Git library - Python3 module
Changes:
dulwich (0.18.5-1) unstable; urgency=high
.
* New upstream release.
+ Prevents setting SSH arguments from SSH URLs when using SSH through a
subprocess. Note that Dulwich doesn't support cloning submodules.
(CVE 2017-1000117)
Checksums-Sha1:
f9de76c8e8179d9b0fe3222f8ef18d5ac6e55ee6 2418 dulwich_0.18.5-1.dsc
70a2466a1c2c22dc35086eca64338a0277a1bc4f 330097 dulwich_0.18.5.orig.tar.gz
9aafa8a9348ff8e3c44c661a4295de577ce22b65 833 dulwich_0.18.5.orig.tar.gz.asc
784847bb494c0bb4467f02d7c8225d0d21e27fa9 35640 dulwich_0.18.5-1.debian.tar.xz
ded5dd8a23f11164a65b4294bad94c6d697be5a7 8915 dulwich_0.18.5-1_amd64.buildinfo
76bdc66a774d0a638c4835c528cf24af34d4cfc4 36332 pypy-dulwich-dbgsym_0.18.5-1_amd64.deb
0d18bd0761e1a54e582b5e0a5577b47cd6f99432 233984 pypy-dulwich_0.18.5-1_amd64.deb
97b4b5e428e35193d089b741515b9c746ec0af5d 40364 python-dulwich-dbgsym_0.18.5-1_amd64.deb
9bdc96d5ea028e80ed44bd8a03d35a4689e3acb3 250504 python-dulwich_0.18.5-1_amd64.deb
42a14c1b0e9b0f20604061a513e248a41921e777 46020 python3-dulwich-dbgsym_0.18.5-1_amd64.deb
3e97ab0db46d1c5b082cf8e08daeb1358002477c 250588 python3-dulwich_0.18.5-1_amd64.deb
Checksums-Sha256:
be760f87997582fafcfd99fa663a157ff6581c2b46288ad9b6702ec43c46b5e9 2418 dulwich_0.18.5-1.dsc
838bac318fd0ed79e0eedb6cfd53b6424dc618fec6b99dc959881b12da7bd6e0 330097 dulwich_0.18.5.orig.tar.gz
56f19ad12c6f0d46eb69d16b90fabdae2c9a0f7803b4290a0f2639ad26598251 833 dulwich_0.18.5.orig.tar.gz.asc
d3282db5e7353b48bb7f32aa3bb6df87a79b9f82535190558e7912c9cface5e2 35640 dulwich_0.18.5-1.debian.tar.xz
2182d7029027337cc2484236bd1b43ebec8b759f17010afae4d4f0a27615e076 8915 dulwich_0.18.5-1_amd64.buildinfo
d154f6fc3325a0e48dd8562d9994e391fd031d9092e73ded62c1cc689ed432b8 36332 pypy-dulwich-dbgsym_0.18.5-1_amd64.deb
bb488059d50917a54108501980730521ab53c42bbbeb91b5bce6286d7d98b594 233984 pypy-dulwich_0.18.5-1_amd64.deb
571052aa7aeab18c7c6757e8b83d78a9282bf6cee903f8628de8ae5c6dd5e991 40364 python-dulwich-dbgsym_0.18.5-1_amd64.deb
e9e2097d171a7afb3fb62bdf5c78cba3b77fdae45a907c53852078aede40cbd2 250504 python-dulwich_0.18.5-1_amd64.deb
af43a58367dc708009c7dc5f68f6527e14e594895d0b996740fec3149c26b1d5 46020 python3-dulwich-dbgsym_0.18.5-1_amd64.deb
76b7760f22a15a6041c3fa798f067c30f113adfa3a07dcb07220d6314a56db19 250588 python3-dulwich_0.18.5-1_amd64.deb
Files:
5dfa4b3fdacec15a2ac3f40a0093b1af 2418 python optional dulwich_0.18.5-1.dsc
4cd7c0a684297d306b14429db37bcf27 330097 python optional dulwich_0.18.5.orig.tar.gz
6f78848de1302f83bbc0fa097f0bba52 833 python optional dulwich_0.18.5.orig.tar.gz.asc
d861e79ab927f774996b879389517a85 35640 python optional dulwich_0.18.5-1.debian.tar.xz
cbfaff30738e7f22223d2e9c2143150c 8915 python optional dulwich_0.18.5-1_amd64.buildinfo
03aa01a6b19627026766de60fb17b81b 36332 debug optional pypy-dulwich-dbgsym_0.18.5-1_amd64.deb
bb6ce072a2af413be98346d5caec38ab 233984 python optional pypy-dulwich_0.18.5-1_amd64.deb
6d291b61074541e09119d9690569c645 40364 debug optional python-dulwich-dbgsym_0.18.5-1_amd64.deb
39631a49900eeb6df9d7e5a989dfd706 250504 python optional python-dulwich_0.18.5-1_amd64.deb
7732dfcd51d261604fba8a4193852ce4 46020 debug optional python3-dulwich-dbgsym_0.18.5-1_amd64.deb
862a64aa35382234ba1fbd91ce24b9aa 250588 python optional python3-dulwich_0.18.5-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEoX1YPWJ8eQgrAMsfmi0kpQTR6fgFAln2DgAACgkQmi0kpQTR
6fhdYQf+PhaNAoV9QIYrQeqkAJACj6FM4TO7Qyq2Gb29o/o+wYPi+9G6EC/TP5uK
y9AAeOZWgiuYgp123uFcN1aAg5z6m6O6l2Q0co1SC4c1e+dak8B1IEozKJsOMC4R
8gNqeOJ8W1uL3Ql6vy0FzVcZfOoLBTg1+JzxBhECMH7ys0B9EbFYtPi4xdM32tQB
ZMxA/oArHNJTXoLmndk8DowV0aRHtkYC32mkrV+0IH5AQUt9ilUaGEDQZYC985SH
uLTJP05cxibMKN5IWsUFd6Am80oIqZRkd9J49Y/6UmY1lf6GWp36nYb9zFAC67hp
74oBAiPYEe2134RQgwHBM/10m4n5OQ==
=sv8D
-----END PGP SIGNATURE-----
