-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 20 May 2018 12:44:40 +0300 Source: xdg-utils Binary: xdg-utils Architecture: source all Version: 1.1.1-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Per Olofsson <pelle@debian.org> Changed-By: Nicholas Guriev <guriev-ns@ya.ru> Description: xdg-utils - desktop integration utilities from freedesktop.org Closes: 898317 Changes: xdg-utils (1.1.1-1+deb9u1) stretch-security; urgency=high . * Fix CVE-2017-18266, closes: #898317. - Avoid argument injection vulnerability in open_envvar() Checksums-Sha1: d8c3f9a77394c9c50def7615b0ac4d861426514d 1957 xdg-utils_1.1.1-1+deb9u1.dsc 0f046491a4f43475f6371f3fb345cb26cedb5114 295213 xdg-utils_1.1.1.orig.tar.gz b69e4e2119c63e0c12f4bb05363477ca85e07923 8868 xdg-utils_1.1.1-1+deb9u1.debian.tar.xz 159da8cc25cb51708753ad780882185cf7666c4c 71180 xdg-utils_1.1.1-1+deb9u1_all.deb 623c70589dbcac044791e059b3e2ab6f8c6ce771 6129 xdg-utils_1.1.1-1+deb9u1_amd64.buildinfo Checksums-Sha256: 8c75332c4a78a6daef7d4a7a463179d15659ee1b9a557ef1c6aba3dee1f6836b 1957 xdg-utils_1.1.1-1+deb9u1.dsc b0dd63a2576e0bb16f1aa78d6ddf7d6784784a098d4df17161cd6a17c7bc4125 295213 xdg-utils_1.1.1.orig.tar.gz e20f1e9bf1f45f0b31660e0a9397f9703654386ec5b7f2bd31b845abb3a72b36 8868 xdg-utils_1.1.1-1+deb9u1.debian.tar.xz 861e85d98181d53f961e4a65fa960b20141ef1c57fc06e2b4ecc9ffca9097b5b 71180 xdg-utils_1.1.1-1+deb9u1_all.deb bc210cf7bf60c238dcceb2691ca7944ea19e86a47f4eb5fb8a3cdddbe3fcf033 6129 xdg-utils_1.1.1-1+deb9u1_amd64.buildinfo Files: cda13a54a7e9a7d89f3f41fcfe83312f 1957 utils optional xdg-utils_1.1.1-1+deb9u1.dsc 2d0aec6037769a5f138ff404b1bb4b15 295213 utils optional xdg-utils_1.1.1.orig.tar.gz 223cc9ca65932fb2df5288efa4536ba2 8868 utils optional xdg-utils_1.1.1-1+deb9u1.debian.tar.xz 6405e2af12eadf65455de2903499818b 71180 utils optional xdg-utils_1.1.1-1+deb9u1_all.deb 4656060321e9cdb367406ed58fb6ec1c 6129 utils optional xdg-utils_1.1.1-1+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEayzFlnvRveqeWJspbsLe9o/+N3QFAlsHpvUACgkQbsLe9o/+ N3RDNw//eTO3Dj49Tlm4FXigAvoPCW8p7AvGnNG4hvMuCIzTRZXBUIu7UgQBQs8d GMy7VSMvSwd99k+cQjUZX0lChmqmhpoPwEghZdyWFRbG2axCPQUYu8LdyVRNQQT5 IgNR1IGRpnTtRAvKuaUjDAJuXYWRQ2fn+wD/sJSBKmrwUcmCKoU1xwSpQ6UlHlST 2NTCTmY3n4IvGMjqTI20/gYsK5lPbxrCyY2uQ1EejHpgvNDSaC4fyjhoAd+MoU/Y Ord5lcKy/Vq/HXlO71k1Usyl67cRHN3k3Wy2f/4Q5qHUnZkC7g9U3CwEAKrXqUAu IlTYXStokJe9D6/ekeHIK2/7SomaWI4Iwom2wTeQ7BPU81jh4F4CJh2y/MjDbREW /MIDiE8kGjsEk5yj75FHwXuhJyNV00jpniIUvZrOtO7rmj5jWoFdU8Di59KxYzQv 2tlrcnMapnj6WtpbOtWxiTvnQSDulOD8lVYI9VJXtJBvgzLD9OP4NOg7TeOkmdn1 AdOgw9NdE5CH9ToHklF3MSi5JwUYhJOpVHQuqrzvRIwMYtRZqyi39x5KmwbRlUXL Dm/CoH829yg3NB2jBEADjc1gJ0Uzl6YT+I1YTcWsp4U82zVc9wwzO7C7ac3wJQSv Nk1th5Vm2O1Yxhin/U5dsoSuN2SpOjPlWXhSQ4mW+9MkkhOU+Lc= =kxbx -----END PGP SIGNATURE-----