-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 17 Jul 2018 09:34:40 +0200 Source: znc Binary: znc znc-dbg znc-dev znc-perl znc-python znc-tcl Architecture: source amd64 Version: 1.6.5-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Patrick Matthäi <pmatthaei@debian.org> Changed-By: Patrick Matthäi <pmatthaei@debian.org> Description: znc - advanced modular IRC bouncer znc-dbg - advanced modular IRC bouncer (debugging symbols) znc-dev - advanced modular IRC bouncer (development headers) znc-perl - advanced modular IRC bouncer (Perl extension) znc-python - advanced modular IRC bouncer (Python extension) znc-tcl - advanced modular IRC bouncer (Tcl extension) Closes: 903787 903788 Changes: znc (1.6.5-1+deb9u1) stretch-security; urgency=high . * Add patch 01-CVE-2018-14056 to fix a path traversal flaw as described in CVE-2018-14056. Closes: #903788 * Add patch 02-CVE-2018-14055 to fix a privilege escalation by injecting rogue values in znc.conf as described in CVE-2018-14055. Closes: #903787 Checksums-Sha1: f366a871736636f275d9069e0ef9255afedd4363 2028 znc_1.6.5-1+deb9u1.dsc 4c2634a91695bbf20473cb01d53baf3d0638a663 1470681 znc_1.6.5.orig.tar.gz 4a7349f7d1dd257ecbc2dfab1593f3d12eeda19b 17948 znc_1.6.5-1+deb9u1.debian.tar.xz e7ea1128a8bc5bc509c13351f88d137c7a1fb110 25071044 znc-dbg_1.6.5-1+deb9u1_amd64.deb a6b746b4779fa075c45c25d3c722c74bd78c7996 100490 znc-dev_1.6.5-1+deb9u1_amd64.deb 28b2a9d47ad386fca17c7eeb731e3cddcb973ef7 611388 znc-perl_1.6.5-1+deb9u1_amd64.deb e4a9f4188e1e9560d0d5a2da0347edd5f19f7d92 640726 znc-python_1.6.5-1+deb9u1_amd64.deb 695803f5a35e057688633a9edccc810687d2dd91 70970 znc-tcl_1.6.5-1+deb9u1_amd64.deb 22e3e7d08f8f009024899694326258ff3c12f695 8130 znc_1.6.5-1+deb9u1_amd64.buildinfo de933a152eb56ad31388139af738358f9c31cfbf 1452456 znc_1.6.5-1+deb9u1_amd64.deb Checksums-Sha256: 847dea96bdc8dc77c20e0d50ec509c0489fba8b31b42b9f03b33d8f032779952 2028 znc_1.6.5-1+deb9u1.dsc 2f0225d49c53a01f8d94feea4619a6fe92857792bb3401a4eb1edd65f0342aca 1470681 znc_1.6.5.orig.tar.gz d757565996f4e0cbd455e77caa67277f1dd45f05616d03d7d8917993f56684a3 17948 znc_1.6.5-1+deb9u1.debian.tar.xz 8432b0e62f928446471d40b7957825f3d9e024e4b34e3ebbbe9df2bb3b5459a9 25071044 znc-dbg_1.6.5-1+deb9u1_amd64.deb 4e7bf2eacfb15731d19b556d0dc076c6b8534a8e4ddcd142e5b9eb728943ecab 100490 znc-dev_1.6.5-1+deb9u1_amd64.deb 9e3a86b4350caa278ee8895a680218a47b935c0d4deac3be0f33d0daadfc6d21 611388 znc-perl_1.6.5-1+deb9u1_amd64.deb 6ef4b80c4b55093656f4742a4f89cdac33ca8632ee51becbb3500e051054505c 640726 znc-python_1.6.5-1+deb9u1_amd64.deb 6851ca7cc7232c6f7b5001900029bab34522799be3d8d07965470cd40846af98 70970 znc-tcl_1.6.5-1+deb9u1_amd64.deb 7961218b56101ee12ff033275381fc7ce0dd8cc96ba190cb6243f9e5e3dfb803 8130 znc_1.6.5-1+deb9u1_amd64.buildinfo d8e9dc3c085cf6d3514911714da32d24edc1f090294519fa3742800e90fc4b4b 1452456 znc_1.6.5-1+deb9u1_amd64.deb Files: 80a434e5820e1341401d4179a9165e47 2028 net optional znc_1.6.5-1+deb9u1.dsc ab22e4e94cdd04c5644c4d9213149af0 1470681 net optional znc_1.6.5.orig.tar.gz 132d4772e9596031648e078b78345cb0 17948 net optional znc_1.6.5-1+deb9u1.debian.tar.xz daa79fc3930266984c927bb4df968f97 25071044 debug extra znc-dbg_1.6.5-1+deb9u1_amd64.deb e342f0d57cbf3319c7d48c45725bc6cf 100490 net optional znc-dev_1.6.5-1+deb9u1_amd64.deb cf2755c5f24588a843f704de2d96c1ce 611388 net optional znc-perl_1.6.5-1+deb9u1_amd64.deb bf8668434b4ad39ffb5a6899ef9603f6 640726 net optional znc-python_1.6.5-1+deb9u1_amd64.deb c6a3f6ba4d622daecb8c7420fd97faf7 70970 interpreters optional znc-tcl_1.6.5-1+deb9u1_amd64.deb 7a7749a097c7e42de343c256d795951f 8130 net optional znc_1.6.5-1+deb9u1_amd64.buildinfo 7d8088e2525ae25a67c46cafea275330 1452456 net optional znc_1.6.5-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEWKA9xYJCWk3IuQ4TEtmwSpDL2OQFAltO77AACgkQEtmwSpDL 2OSyeg//bdffR6HdAxbHkglhrLY8hL0InvQBewDVsLdsndjebNbDKZV+W76VrFdL WAk0yMSoFKyDhQ0KRfjwsTvAcG2E1HdXp4lda3DgMScpvj7UcU0QPk6/DFzcTrT0 MrdkpNhIkAEhrs+Q8oeGd6pEElVWcVpR3tOEBZcTrcjoj9m5JLqL406CIOT2WHPJ 0V+D4gQPZzdzIDweuL9cq8MVQJnUZT0Di3rWGuvcVC3qCYntsrfj+2zEOBB1Kvt9 i51rc5SIVDq0sgM2C9dDX5EA4nIncuz36a8LRq113w5OMEH9SGz+O6n20+5whVGU ge9rLBioORTDW4aAoT7ymQW3IsvFwlAqTUMpIhchqRQ3G0Q+o6QLM8FA1Htp99xl 0fFolybXqpDEvvaEIL5PId16C5JtUgQbdONH0O+xObbN29/SuNbCmAmf9BY8ztK7 LH1rljbnm/LiKXdNN9q9MJC2gWZX91lRfDKN7Tx+3nGu+rHqGglVF9JIO+pK8eEg CnJVxPfnU7dPiVDUbjySCtNgOe2se+634t402aiIwS7a7w3BLdImGlQgg+AxtxvA /gq+AC6HLHootPHK21s+eqY1VzcLuTEaAc7Vmi1sPanFOUp08NBfUlnI8Sq2VRSj aNLLbgejkOTSx+fXTcxBfnPXRVDVvtaboq/FNWq4B32VG4qCKCo= =mhby -----END PGP SIGNATURE-----
