-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jan 2018 22:23:33 +0100 Source: libtasn1-6 Binary: libtasn1-6-dev libtasn1-doc libtasn1-6 libtasn1-bin libtasn1-3-bin Architecture: source Version: 4.10-1.1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 867398 Description: libtasn1-3-bin - transitional libtasn1-3-bin package libtasn1-6 - Manage ASN.1 structures (runtime) libtasn1-6-dev - Manage ASN.1 structures (development) libtasn1-bin - Manage ASN.1 structures (binaries) libtasn1-doc - Manage ASN.1 structures (documentation) Changes: libtasn1-6 (4.10-1.1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * _asn1_check_identifier: safer access to values read (CVE-2017-10790) (Closes: #867398) * _asn1_decode_simple_ber: restrict the levels of recursion to 3 (CVE-2018-6003) Checksums-Sha1: 7b53e95c2d8615131cbdc01c3fa53a65ae0b990f 2614 libtasn1-6_4.10-1.1+deb9u1.dsc c7b36fa50866bbc889f7503c7fd1e9f9d7c52a64 1887057 libtasn1-6_4.10.orig.tar.gz da43860893146e9350d195de854975d4cdbd7602 59716 libtasn1-6_4.10-1.1+deb9u1.debian.tar.xz Checksums-Sha256: e9095d4d79e1015c2c2d3e8868d3c50f3b43510387a9ec9191d83ff57024fb39 2614 libtasn1-6_4.10-1.1+deb9u1.dsc 681a4d9a0d259f2125713f2e5766c5809f151b3a1392fd91390f780b4b8f5a02 1887057 libtasn1-6_4.10.orig.tar.gz fed5f50904fbfecc50d253aa4bc62221849e363430f71125039ada1512807937 59716 libtasn1-6_4.10-1.1+deb9u1.debian.tar.xz Files: 94853e6afe626875cccea81702d88f75 2614 libs standard libtasn1-6_4.10-1.1+deb9u1.dsc f4faffdf63969d0e4e6df43b9679e8e5 1887057 libs standard libtasn1-6_4.10.orig.tar.gz 218919470bef9b5666d149d57017adf3 59716 libs standard libtasn1-6_4.10-1.1+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlpw5rpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E7S0P/j2VZLd9ktF44AmPK98EdwqGDnOHGdGn wRMeizO6Rt0I+4WxMrglYmkDmR2+LxaZAr3O5ZhbgwkoZy/6h29OiPGcbUP4EvxE wMHUvKlS9J0ZZlVeLy8qQGUSG9H260x3qCsAwy5w5phYNJ9GxJ8fynlfdYz9Xrb7 0siiaMtTSDMqOuNi0xTo7mKMgBikD46JYpIRTAJsUAAryt/t7uk4PH8RVMMqyh2e GVZfF9LrpQAYowwDtyqHqKyFYRx4Jdr0Az0CW64QpCyXZDEOPvI00Cc/ObXjlnAj ftTI9RpYjpKn6yscU29YygZ5DEq77haBaiGcoa7LJiSpCCR9XqnnlDB4aVAR6NCK yo53H4e/kIJ3G0J9jRuD15RgzcGqT5tMNDIRmEVHzKnNEQ5blBcfrvu97qONOq1o 75zsmK7iM3Gilr6opDZpmWdEjESXnORVE5fi+l7Rpb13cVxTU5Vvxy8OevpAeYu8 sKRR7+G9cNoWwYVoDWVhgIAZrJNy2kCW8+GlEw1ZoZN46IaBM6HBTsYaxILI5k6G y2yXha3onaOMjcXBI0OxwqTRI4UG2zUZhyG1R2WvCqD5CjDLZtALfEWhAWH1LIB9 WQ70Z+/TwGG9eTFwu+KwBiF9x4CW5bBOF4Ih3p62soAKMWueXMhpVZMlJ8I6B6jw UCWbc37fB0ia =QqND -----END PGP SIGNATURE-----