-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Jul 2018 09:52:48 +1200 Source: xapian-core Binary: libxapian30 libxapian30-dbg libxapian-dev xapian-tools xapian-doc xapian-examples Architecture: source amd64 all Version: 1.4.3-2+deb9u1 Distribution: stretch Urgency: medium Maintainer: Olly Betts <olly@survex.com> Changed-By: Olly Betts <olly@survex.com> Description: libxapian-dev - Development files for Xapian search engine library libxapian30 - Search engine library libxapian30-dbg - Debugging symbols for the Xapian Search engine library xapian-doc - Core Xapian documentation xapian-examples - Xapian simple example programs xapian-tools - Basic tools for Xapian search engine library Closes: 902886 Changes: xapian-core (1.4.3-2+deb9u1) stretch; urgency=medium . * Fix MSet::snippet() to escape HTML in all cases (CVE-2018-499). New patch: cve-2018-0499-mset-snippet-escaping.patch (Closes: #902886) Checksums-Sha1: f164fb4186db02dbe551b9978ba6d6245f42b21e 2242 xapian-core_1.4.3-2+deb9u1.dsc 2a8e952201e49e587f25e5bd8898e189a6b6d5f4 19944 xapian-core_1.4.3-2+deb9u1.debian.tar.xz 24d2facb00e0029a4c32ada4a45e7ab30133fc3c 508312 libxapian-dev_1.4.3-2+deb9u1_amd64.deb cf8b8999caf6d2d44d93132a4cad8c94865842c1 11185908 libxapian30-dbg_1.4.3-2+deb9u1_amd64.deb 69880a4ea0b9615e42a28043c147539c8d99ea55 1067390 libxapian30_1.4.3-2+deb9u1_amd64.deb e21a2562168f23093b9c0457d089629327dac6ed 7400 xapian-core_1.4.3-2+deb9u1_amd64.buildinfo cea4621d7afde74cf8e75df81f1dd68a093a3946 1450934 xapian-doc_1.4.3-2+deb9u1_all.deb 341ff4780fa47bcd9490af9cf90ec63259498f14 448900 xapian-examples_1.4.3-2+deb9u1_amd64.deb ee5890ad96d486703f537746b2f81db96f6ddc27 478220 xapian-tools_1.4.3-2+deb9u1_amd64.deb Checksums-Sha256: 5182f2e68461e5a0f70d8266af423062d691244c28cca3263f355788f84fb448 2242 xapian-core_1.4.3-2+deb9u1.dsc 24a70fa5fda65dd68b5a54d92309340b847d3e2a7835e098aab7bae01a01a3ea 19944 xapian-core_1.4.3-2+deb9u1.debian.tar.xz ead1feebeeb6a30c4b799d9348c62f9b8ab27c7c9ada6bda7556c07108c90e1e 508312 libxapian-dev_1.4.3-2+deb9u1_amd64.deb 33b3dacc9c87c05993f354f245a90a0011a3ab073556064a593464d3450f4d6d 11185908 libxapian30-dbg_1.4.3-2+deb9u1_amd64.deb 4f56768badd15555aecd03d979638a34d1f6b5536549f4b0fc41ee926bafa976 1067390 libxapian30_1.4.3-2+deb9u1_amd64.deb 9365f2fcff4471d31e514aa1b0bfa2db45b7b5c9c0162733966614a8081268a7 7400 xapian-core_1.4.3-2+deb9u1_amd64.buildinfo 530189da6a7c15ffd01a9dab091b44d6bc8430c2c65f3375894e1149067f8c6b 1450934 xapian-doc_1.4.3-2+deb9u1_all.deb ea0456202591d9bacae50a2c3cac28f5589507e6693b6f4a104daee87ed2ec03 448900 xapian-examples_1.4.3-2+deb9u1_amd64.deb ac8c780f6678c7b681d6dc4f626a7c0f02a94e5fa3b4053fd1a1c9d2181f3ac8 478220 xapian-tools_1.4.3-2+deb9u1_amd64.deb Files: a22b350ac24b1dd7f3336a8bbfc36f2f 2242 libs important xapian-core_1.4.3-2+deb9u1.dsc 43ce4a1fb1dc1f6b8ba205b727f876dc 19944 libs important xapian-core_1.4.3-2+deb9u1.debian.tar.xz 28bc6ea22f39e62ec19bd4f39c04b4d9 508312 libdevel optional libxapian-dev_1.4.3-2+deb9u1_amd64.deb 0764dc1a5ef8b2f4271162efa3e257be 11185908 debug extra libxapian30-dbg_1.4.3-2+deb9u1_amd64.deb 38c0d4e481590014a4e9154eaf556436 1067390 libs important libxapian30_1.4.3-2+deb9u1_amd64.deb a694a6587beae9b73225d7480e00a564 7400 libs important xapian-core_1.4.3-2+deb9u1_amd64.buildinfo d868f1517ba1ef597a00cb7285ac69f5 1450934 doc optional xapian-doc_1.4.3-2+deb9u1_all.deb 720fc01ed7250aeaf89fe2b991b87a5d 448900 doc optional xapian-examples_1.4.3-2+deb9u1_amd64.deb 832bcaa4194818df5a485eb935f76c7b 478220 utils optional xapian-tools_1.4.3-2+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECOJAD/f+j+3jrLUoGBR7BzutKwcFAls+l4sACgkQGBR7Bzut KwfxJw//TKH3ORdH4q3yPkg28vUppwyaHxskzWianY3aLwtdmqC886j5OlRX5ojk faA7x/BLlv24VEPS1TaODJpNWSkNu91xf7spk8UNwTOAkc/mGNt+il/Af5s51ihu vpm/DWP6fNvC1G8Ef0VTDdL+gXSGBUntW721BmLRqlt81SM8tywyJrWljUzSbuUz c/mITpXtDQNDJmNsOjpSsHUAxspsMb3T3auFyDL78oaEbJBoXYnt7G7lcfmJshJx m7u0bpXn2jMocvCXzvmgPz7C5BmqOBKDCn8CyXSZDJTzzxcv+IBCp0Ho4ipql3vT dptfHaEpESYtIS0TTq0RNszFxWvg7i77/KKfp9fVDyYX0J9Iz1qEogQg0+PWd0Ct q7r1MsSnw0HJB3cEP4wVNs0jyOQf5SolRvLeuutYPemV/q8c8Jz32SPPPA8I9iJw 6dCGrSSH7HAKzkT77d3sGRPaCXJry3JmaZMG5HGPMXQDALuby/kKXjIeE29g/of+ 2vtpbSKZKpsE3yXX7IPg85qJDKlFq1yq3lLJUcID29i06BUTFu5wgXWnf0iIJw1K hukJGV+7fbE+NqnspB64kFc/pl/GdsYFAe3vm0RxSfHMoPlvdLgBTKHUXmO8Mjtq 57eVlRb+Xvlufjddj+JEQdJPAI5NYAnDd8wPJ3W7MJ48DlhKP/w= =HmQ9 -----END PGP SIGNATURE-----