-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 14 Nov 2017 12:42:11 -0800
Source: variety
Binary: variety
Architecture: source all
Version: 0.6.3-5+deb9u1
Distribution: stable
Urgency: medium
Maintainer: James Lu <bitflip3@gmail.com>
Changed-By: James Lu <bitflip3@gmail.com>
Description:
variety - Wallpaper changer, downloader and manager
Changes:
variety (0.6.3-5+deb9u1) stretch; urgency=medium
.
* Backport various security fixes from Variety 0.6.6:
- Fix shell injection on deleting files to trash, from upstream commit
https://github.com/varietywalls/variety/commit/475a5e076b9c8c7c83176214f84455dc78834723
- Fix shell injection in filter and clock with specially crafted
filenames; upstream commit
https://github.com/varietywalls/variety/commit/65722237baa996b0ef2389cea693bfeeba62b224
- Harden ImageMagick calls against potential shell injection:
https://github.com/varietywalls/variety/commit/a7c134ecd494bb878c73df9f65cb838dbb57413a
Checksums-Sha1:
ce8e6e2810e3067e4d18a5c8dd7215319119f9ad 2007 variety_0.6.3-5+deb9u1.dsc
3a8e49921125af76f749f9bc977b6f1242fa712c 21488 variety_0.6.3-5+deb9u1.debian.tar.xz
401ccf6dfe05188b9c78d778e0185133d97fb986 609342 variety_0.6.3-5+deb9u1_all.deb
2825ad2746fb4db40579fb2d80fe1ebd456072ec 8773 variety_0.6.3-5+deb9u1_amd64.buildinfo
Checksums-Sha256:
986944b3b2d03ead37fc7684f56556b098053b67fa1280a6a9bf11276b768a37 2007 variety_0.6.3-5+deb9u1.dsc
98c87c3b52ec0e848e5345a9ba21aa8ffd2cfee8540c2ced9fa92ed345ea3635 21488 variety_0.6.3-5+deb9u1.debian.tar.xz
ad7b24fefb31777aa2a53703be0af797c0b71cd0d57aa6fe3c2b70d8a3a77764 609342 variety_0.6.3-5+deb9u1_all.deb
b3ab8ea058e7206cc8a7fbd06ccf079d0883f3e8ab1f1ef9fcbe2826c6a034c1 8773 variety_0.6.3-5+deb9u1_amd64.buildinfo
Files:
44857a470554cd7a82b136e78c25bce3 2007 graphics optional variety_0.6.3-5+deb9u1.dsc
74de7ba2fd7ef5838b1d047ea2f7ab3e 21488 graphics optional variety_0.6.3-5+deb9u1.debian.tar.xz
d733bdf01d09da86b364d7da1d3d5a01 609342 graphics optional variety_0.6.3-5+deb9u1_all.deb
cd9db46f410ee025fada0725e024a7b4 8773 graphics optional variety_0.6.3-5+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIcBAEBCAAGBQJbBInGAAoJEPNPCXROn13ZOuIP/A2k9AmCkCVTFQs7MIo16vRJ
xMlEyf8I144RKk4YrF/nDLiZxVLgFPJ5QuH+QDjwHWpabafW7QpA/Ja7KDStbx7R
QKas88UX4yjHpZbzFvnJMVS0a+fe0S7sN30zw86w/yUN8ab+hPqi4Hktmb+4IExT
No63DPeRNg8nLlOZcT4N9qZxCq+6HL8hBDPjFBvhBX4Vrj8W3Kxh7dQ7eCTtsCG3
yFEybN6UGAjLclKmP7Mn+TNjrBUymi/ugm42F5x+37TeQ3GSc43x5CCyJdjQ3zuD
4XQCkozOfWcXa4hcg+7qp0TDQhClAu+SxsbhYUUdz6MIn/xDCx2o+A+ve1SjUe2p
X9sD8XbR7K2uxXOcEvsHS8IEZMCWZS21ZAJoyEFzWMglO45rr63u8Z59JKjPAxA4
kCwPQl5CoyOLHbpl9KKXhAIUhsTPE1j1oudMCTkixzaZbfqF7+0ffkJQhcxdgJpv
xwj7j23/peSfD+Vf7TX1s1ozqNVO053csd/6nppN+RCWC+pwdV7gqM9M2tk/w6mx
nrtqtvNFPKwYKuXZzj/Vh81HAhoshEmHo9jD4AIFJQGb61r83iJ55PWegLlTMpuc
3vo/AxtUqDelIeMgIUW9VxVyioPNRdB3f5Ag1SMGkopSW/AKzE4cK87ce/3ZAngm
tLx2685IGdF4k8JaUg4y
=BBPN
-----END PGP SIGNATURE-----
