-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 04 Apr 2018 19:49:02 +0200 Source: sharutils Binary: sharutils sharutils-doc Architecture: source all Version: 1:4.14-2+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Santiago Vila <sanvila@debian.org> Description: sharutils - shar, unshar, uuencode, uudecode sharutils-doc - Documentation for GNU sharutils Closes: 893525 Changes: sharutils (1:4.14-2+deb8u1) jessie-security; urgency=medium . * Apply patch from Petr Pisar to fix heap buffer overflow in unshar. This is CVE-2018-1000097. Closes: #893525. Checksums-Sha1: c7fd75e63359185e79f7c23eedf14fa01314cf3f 1465 sharutils_4.14-2+deb8u1.dsc 5d2d76caa6ee816202fb78395415bd863043d81b 1089052 sharutils_4.14.orig.tar.xz a69401184617dd8e3a6d03f30e37446446370ec6 6608 sharutils_4.14-2+deb8u1.debian.tar.xz 957347359889e5bf35735a05e84171f64d5aaa48 44234 sharutils-doc_4.14-2+deb8u1_all.deb Checksums-Sha256: eb7387cd9427c04d7caf5249db2c3b40eea4d31ef0fd8cbb3c8d7b31f04a4f4c 1465 sharutils_4.14-2+deb8u1.dsc eae388efcf52aba0b081f09053189e0a3ad238561d88716b880b5c0676c07a0c 1089052 sharutils_4.14.orig.tar.xz ecb9c2be1b57309681b5fd07cf2dff71a95e4d69114002a8bb1f9b5a66468b0b 6608 sharutils_4.14-2+deb8u1.debian.tar.xz eaf3e411ac92819ae21ec2616edccdd0d0398b247f7adf20d3fe05307c7a8275 44234 sharutils-doc_4.14-2+deb8u1_all.deb Files: 02b9d1f27b3e32c4ebf70a698dd2095d 1465 utils optional sharutils_4.14-2+deb8u1.dsc 77ede22951bdb67279c6e78e79a04784 1089052 utils optional sharutils_4.14.orig.tar.xz e5580701d427c5c22a93f57e4c435349 6608 utils optional sharutils_4.14-2+deb8u1.debian.tar.xz 3adaf0afb5e9793561b5d728e5518a60 44234 doc optional sharutils-doc_4.14-2+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJaxRIVAAoJEEHOfwufG4sy8HMIAKgaeBEi0ADeIwKKZYl+bPWP uTFB4stmC4oYUWvbFeNqG1GFl2+blBV1zjakaDaDCaICUURNj41R+FHkYnbUzgbE 9xvmGvJFr6WLrtfW6NfyHmTHe8LpdaSGhCJfOGR4sOluDHTd/Q6X6/NvUDPuGWUf ljpLR4tf6Dx+6C4gwUGmQGkSkWg5rfRcTTEOCPwRGwBNh0NZm5lOgrj51DnFBNT5 HC7Gw+X7+i6UvG/YzXCRqbqMuBI1FOHPGOvLBfQqJE6XPU8KWogI/ynBTRaX57SI u0QeWYSVer8Hwu6XcI7R1UPxBEnEGaEo1c1sJFRFBxssxJeXNvZamJFXQwETkVM= =V9L7 -----END PGP SIGNATURE-----