-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 03 Oct 2017 16:13:44 +0000 Source: sqlite3 Binary: lemon sqlite3 sqlite3-doc libsqlite3-0-dbg libsqlite3-0 libsqlite3-dev libsqlite3-tcl Architecture: source amd64 all Version: 3.16.2-5+deb9u1 Distribution: stretch Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Description: lemon - LALR(1) Parser Generator for C or C++ libsqlite3-0 - SQLite 3 shared library libsqlite3-0-dbg - SQLite 3 debugging symbols libsqlite3-dev - SQLite 3 development files libsqlite3-tcl - SQLite 3 Tcl bindings sqlite3 - Command line interface for SQLite 3 sqlite3-doc - SQLite 3 documentation Closes: 867618 Changes: sqlite3 (3.16.2-5+deb9u1) stretch; urgency=medium . * Fix CVE-2017-10989 , heap-based buffer over-read via undersized RTree blobs (closes: #867618). Checksums-Sha1: b492f64bb28aa8a8b1492d6cb195fdd6fb6799e5 2538 sqlite3_3.16.2-5+deb9u1.dsc 16544acb3df57a51e2300a02a4030ca0db8503a5 22128 sqlite3_3.16.2-5+deb9u1.debian.tar.xz 7ed4e767fd234a7428d5619e5457d7fab8c8809e 139954 lemon_3.16.2-5+deb9u1_amd64.deb 8ab51fe725df745088c56a4278f42ae0d733f5d0 4336714 libsqlite3-0-dbg_3.16.2-5+deb9u1_amd64.deb 3f2d5426479a60a80a626556e7152b2f1d61a232 571822 libsqlite3-0_3.16.2-5+deb9u1_amd64.deb 9daa596716f1d7bb8273fa20088e4349bb738bf2 703718 libsqlite3-dev_3.16.2-5+deb9u1_amd64.deb e4343eec3732aa7f340c149e9cd59c8fb71ad8b1 107748 libsqlite3-tcl_3.16.2-5+deb9u1_amd64.deb c36302111fcfebe4a46efb1916b7a9a8e4a443a5 3498584 sqlite3-doc_3.16.2-5+deb9u1_all.deb 15c42692f4ec1d356c7fd881c78d0d8266beb148 7922 sqlite3_3.16.2-5+deb9u1_amd64.buildinfo 4d1aedbc2a89ad25181a19ef32595b1ea75f4081 784090 sqlite3_3.16.2-5+deb9u1_amd64.deb Checksums-Sha256: aafd7c33e9091a0c8703a9b2dbfaf1b1592d8fc1df18bf92d3bfd2ffc350cc96 2538 sqlite3_3.16.2-5+deb9u1.dsc 66358aca4f46ead86ba909bc5899bd312c10c46e620ad017120efe3b8714d44e 22128 sqlite3_3.16.2-5+deb9u1.debian.tar.xz 718936f5cacb14354413cf2c6e92a29603eae03c16e937b6e79d81faced565a4 139954 lemon_3.16.2-5+deb9u1_amd64.deb 36a0b18ea4ad586a77252780c331345bac590c76e2f5d9e20ea41fccc3e60922 4336714 libsqlite3-0-dbg_3.16.2-5+deb9u1_amd64.deb f448b8dbab36f859cc37627472a5df6aa281ab05fdab386296ee6c9503a5f666 571822 libsqlite3-0_3.16.2-5+deb9u1_amd64.deb 4a129e9565b77e1c58fc6819639a0a291395a03902e2254779c92500793327b1 703718 libsqlite3-dev_3.16.2-5+deb9u1_amd64.deb 261e0bcb5c48220561e5c4d6b36a338d6585fa2eb14da15e1de7d1cee4189673 107748 libsqlite3-tcl_3.16.2-5+deb9u1_amd64.deb 78f7555b0d351bb09122276ae10e336aa2b8e809d9afc0411c9be068644d4238 3498584 sqlite3-doc_3.16.2-5+deb9u1_all.deb daea566b6bde49d7a4f778456dd286478649a6c1021853e62f507df72afa67a7 7922 sqlite3_3.16.2-5+deb9u1_amd64.buildinfo d361917c5c159886dfbc99806c73bd1c12a57782497b9b8724de704897baf451 784090 sqlite3_3.16.2-5+deb9u1_amd64.deb Files: 37eaa43e253c93f2acc651676b81100a 2538 devel optional sqlite3_3.16.2-5+deb9u1.dsc 1b639c774cdb30e5e6a15d09de76ac6f 22128 devel optional sqlite3_3.16.2-5+deb9u1.debian.tar.xz 8e780309d5d0dfcd12c139568d2d28ef 139954 devel optional lemon_3.16.2-5+deb9u1_amd64.deb ed34e15645b5358055764b0ac500a513 4336714 debug extra libsqlite3-0-dbg_3.16.2-5+deb9u1_amd64.deb 4807c767fd5f870a543645d95d68ffbc 571822 libs standard libsqlite3-0_3.16.2-5+deb9u1_amd64.deb eb8c2fb7858596b48a93e184fbc38e6b 703718 libdevel optional libsqlite3-dev_3.16.2-5+deb9u1_amd64.deb 94bae4aa496d8ca01d89538fb382d8a1 107748 interpreters optional libsqlite3-tcl_3.16.2-5+deb9u1_amd64.deb 7ecfd8bf696d31dc9b049703948ac9fd 3498584 doc optional sqlite3-doc_3.16.2-5+deb9u1_all.deb 45d3976ac53e7be4128dd99e65612860 7922 devel optional sqlite3_3.16.2-5+deb9u1_amd64.buildinfo 2bbf617606ada7b9209848094201ca58 784090 database optional sqlite3_3.16.2-5+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIyBAEBCAAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAln2H5kACgkQ3OMQ54ZM yL/DkQ/3XaVWpiKEMBPp6uzjt6CADe+kUiX6eVigjv1OXspsXymgsT8Jkh41FTJA SLFIlBhhnXibepFoCL5rLdaKNzEtakfWnTs9uv8/8ZhMthSnP4NiGnsgX6175k3m WzTmsXLPflWu84k3aM4aM122JqWjpsk9TB3qTTqQgc3q4fXH7BTLJoiLrWrLzeNl ctWjjKCHcx9bGchoO+zXh39P6aABEZs19hUVg8LcRhglYMUjHbkU1HZAuZ5ErAAI PoOmvaPm5BsDd4cG6Cw7q7Nq7DgUkJ2MRvJcaNsMrmH2zIPA7pDNhGFWqbbPn2Sm 5c1DZ7jcL+tmlGpteZTi81VJbNLTZP13+0o355CJwMwhujcTF/uxRAs7n9zAPRtn cW9NQQnWMD4PkPdkOxRLTZ/9XvHnYJNQjr0pws59Fs/x6aEZ2D9QvDI83Fih2yFg D+SRlp7qftdGymfFAi79heRIZoQO22S9NJEx3VemEnXlnAjmYmlaZKjzg4nzzRJR d6hsoIhMpBWkGZveTy9ffUqZGdloPxdt+iX5GVfVBWuVVOoK9jCNXtT7rHYidvZn +B3JMaZIOqSvWTfFz4y33WZ/vvvcp6DUlyysQVygk3bdavBBs9znVxZij6iLg+Og d8+zF5rAIm8ExL/MIhs4WpAVx3xuke6bxfFvzeNKReIKXHT/eQ== =2lzs -----END PGP SIGNATURE-----