-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 16 Apr 2018 20:48:43 +0000 Source: patch Binary: patch Architecture: source amd64 Version: 2.7.5-1+deb9u1 Distribution: stretch Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Description: patch - Apply a diff file to an original Closes: 894993 Changes: patch (2.7.5-1+deb9u1) stretch; urgency=medium . * Fix CVE-2018-1000156: arbitrary command execution in ed-style patches (closes: #894993). Checksums-Sha1: 96b77e88afb91b828289109bdc0a2eab9ffb8ab3 1840 patch_2.7.5-1+deb9u1.dsc d66e3a914b19c0a6f1ec06c0f9912fa3b704be1f 10584 patch_2.7.5-1+deb9u1.debian.tar.xz 4b5bcc7a40b67350939c77deddad27306d477a87 169198 patch-dbgsym_2.7.5-1+deb9u1_amd64.deb 222193f00d9cc0f1e766b49cf5cd47dd637fa6fc 6290 patch_2.7.5-1+deb9u1_amd64.buildinfo be60ed17580be3bde3ed10952e77922f9dcdd115 111626 patch_2.7.5-1+deb9u1_amd64.deb Checksums-Sha256: 90ff999a9bce963d2adf7afab34aca5227d861bdee85fc8bb324581c1cca0350 1840 patch_2.7.5-1+deb9u1.dsc 8f040aa1abb96579d114bac43d8e0d8f22ef63c689d1ebebd17941fa37d11577 10584 patch_2.7.5-1+deb9u1.debian.tar.xz 202f950959371ff6ed95f9e7b5358fdf380e53073908b234abd124edcb202258 169198 patch-dbgsym_2.7.5-1+deb9u1_amd64.deb e752b00e3e21dbb15ee44f997ad3c0652253a865260ce99182168e60bdcac1f6 6290 patch_2.7.5-1+deb9u1_amd64.buildinfo 88d2965ae2b927e17f86b373b4088bd68ccdb1c625134a0b5d1522d78bfcd12f 111626 patch_2.7.5-1+deb9u1_amd64.deb Files: 13a6efcbe9ebfec737686cbbb62abada 1840 vcs standard patch_2.7.5-1+deb9u1.dsc 4b7f5c8b2c0d0dba7bfe96fb3c0180b4 10584 vcs standard patch_2.7.5-1+deb9u1.debian.tar.xz b1c850fef8e60d37da96aabc65678ff0 169198 debug extra patch-dbgsym_2.7.5-1+deb9u1_amd64.deb 46fea8036ce16d0cf1cd62907a440b78 6290 vcs standard patch_2.7.5-1+deb9u1_amd64.buildinfo b234a85eb20fc1004d15a053e1ca5baf 111626 vcs standard patch_2.7.5-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAlsgMt0ACgkQ3OMQ54ZM yL8fEQ/9F7uqSztfZfxt6Ig+PZswWUoFAZT6cn/D5s07NBdlmGkf7swl0gVAR+WI 8tNZ2lS2ztWwGmgKvbnd4gRlIP8Kslo1tKO+1VZK+jqsihigtD48JvPqK4wTxLzI O5X2TNmPhypMMSVNZRminh720aUKlS4Yq1JsoiCd9vRXNao6z3zJiqcSX43ZsUEN m0Z0ZM2WVJ+lW6q0v4kg6Reukskwel1SkTaJIiTH9+l1Motsg38wqcqps9GaIIXD tsbLl2qKKmd5HyG5uiYYSkMZ80FDzFqEnsj0qE6uTKhZcxP4Srsgg+KPS2F7eWaA d8U4N2TiskyvJDcZlS6VcNIzbx8JaEHfPCsJVHdF57QASPALNqLaRxmYqSvyJrC3 yOUm8iNeGAXZQG32tcRMeDKa4wjeR5yxVW1CopI4bGmrd945Acenz26WJXddFF19 y6UIhk5kuiqmEPTiP8vgUHHtpcrlMClkeD6x46j1yhdoImokGvdMrX+KJfc9HTQH lM7mrPOySr0oG+2yuIFSwNz7RSrLeiwyiRtzfZeu5Aw4HLw1hRbZ20TV+4sioGMu JMs2ZKzQSD7W62yBZadVK4EGQP8Kv2Dstg3rCaGfq7unZQRtXSo4yUrA6Mnn6XMY Sw0Frc0SB38tw1yT595DOXceouHujVovte8rPw7EvQARls2LeDw= =7ljG -----END PGP SIGNATURE-----