-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 18 Aug 2018 22:32:47 +0200 Source: confuse Binary: libconfuse0 libconfuse-common libconfuse-dev Architecture: source all Version: 2.7-5+deb8u1 Distribution: jessie-security Urgency: medium Maintainer: Aurelien Jarno <aurel32@debian.org> Changed-By: Holger Levsen <holger@debian.org> Description: libconfuse-common - Common files for libConfuse libconfuse-dev - Development files for libConfuse libconfuse0 - Library for parsing configuration files Closes: 904159 Changes: confuse (2.7-5+deb8u1) jessie-security; urgency=medium . * Non-maintainer upload for the LTS team. * Add debian/patches/CVE-2018-14447.patch from upstream to fix an out of bound read in trim_whitespace (CVE-2018-14447). Closes: #904159. Thanks to Sebastian Roland <seroland86@gmail.com> for the patch. Checksums-Sha1: 85df7bf5b17ca760ac367f15df05ccba0f6e9b35 1892 confuse_2.7-5+deb8u1.dsc b3f74f9763e6c9012476dbd323d083af4be34cad 517272 confuse_2.7.orig.tar.gz 4b1b13da858f6d216d21eb877dcb53b9dfa08e90 5812 confuse_2.7-5+deb8u1.debian.tar.xz c9496a1d3543b7c3bc1972a9411537b6f1d80ac0 4780 libconfuse-common_2.7-5+deb8u1_all.deb Checksums-Sha256: f7ad64f58fc05369516071b149c315ff1ae7199510c0ed1b6936cc4594439af1 1892 confuse_2.7-5+deb8u1.dsc e32574fd837e950778dac7ade40787dd2259ef8e28acd6ede6847ca895c88778 517272 confuse_2.7.orig.tar.gz cfe56dcd38b2cac7f559409e1abf8165b5cbb5239e567eea823b718fa3060f69 5812 confuse_2.7-5+deb8u1.debian.tar.xz 2f46eb1b9331d9a9e107167f9b1bc60aa8f2f1632cc879248c274e5ef5b4b5c9 4780 libconfuse-common_2.7-5+deb8u1_all.deb Files: 1a00b9d84aa7355f76adadb16137c0ce 1892 libs optional confuse_2.7-5+deb8u1.dsc 45932fdeeccbb9ef4228f1c1a25e9c8f 517272 libs optional confuse_2.7.orig.tar.gz 6dc298f96d6f68ffd9dee78629a51253 5812 libs optional confuse_2.7-5+deb8u1.debian.tar.xz 4a4c70ab8ad776c7f4532c5518c4141b 4780 libs optional libconfuse-common_2.7-5+deb8u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAlt4kM0ACgkQCRq4Vgaa qhyZmA//XBrmidfpWEL1g0mjymZSmH+QuJH2RillPccX574jXWVxM5tbBVJr/Tny xhVK70w0NwQOu06uR6mQa6agWRFAVRXq68oL/6Eun0m8Hg69303GhsmowXdhuD2t eyQseUKlFeYJ/5bgiP0+QqxHO+VfHVMZhZkuC8bsNPFNFnpq8zTKTb1yH9+289kI Ay4loRI/RL2xv8PEnYkO5nT/+VeVB9fNGvHR2S+vwbb9k6WpYjO5x76R4cXfa8bT oyTimMk3tC/gD1gRDB5LR77T6EPhZ56efy29XbhIDLueHjkdEoe8qWpWYw4esG7S cTj/OUViPWZ7KEa+9JLvV0P62h3VHn3q0SIym0JpvtMLAXk9AVn7BNJtSEYrpuEE fZqwv3stBcJLI05MJ1XkSzNyIBYSYrG7CgZ/nquSQqylZcpKS8D4sp1CtTfD2MAX 6YhxoGaWJTPVf3cOPDY3rI9ntxhfKX6xjDvZNss2EP7hlmbO11KHBVbRWMMe659r TcEp4FwqZ2X3Av+9j0QUTsK7gwhCbSqwEC609KO7TOfXzzvDqkc+ndgj20Ui4hwN XyVUCocDBx5svLGoo4aehf5p55hMop8sE+GxeNG04wAOls/t05pLUBW7jyx/spPD QNj2KKgPcHkekBAtRF+glZ+L5kcOZwVWkR4G8D4uAGHO/3AbGmA= =Z0EG -----END PGP SIGNATURE-----
