Accepted quassel 1:0.12.4-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 28 Apr 2018 11:54:39 +0200
Source: quassel
Binary: quassel-core quassel-client quassel quassel-data quassel-client-kde4 quassel-kde4
Architecture: source
Version: 1:0.12.4-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>
Changed-By: Felix Geyer <fgeyer@debian.org>
Description:
quassel - distributed IRC client - monolithic core+client
quassel-client - distributed IRC client - client component
quassel-client-kde4 - transitional package to quassel-client
quassel-core - distributed IRC client - core component
quassel-data - distributed IRC client - shared data
quassel-kde4 - transitional package to quassel
Closes: 896914 896915
Changes:
quassel (1:0.12.4-2+deb9u1) stretch-security; urgency=high
.
* Backport upstream commit to implement a custom deserializer.
Fixes possible remote code execution. (Closes: #896914)
* Backport upstream commit to reject client logins before the core is
configured. Fixes a DoS vulnerability. (Closes: #896915)
* Backport upstream commit to fix OpenSSL detection with Qt 5.6 and GCC 5.
Checksums-Sha1:
1e70cc25847370393dea2be32b93014bd24f407f 2697 quassel_0.12.4-2+deb9u1.dsc
0976e6c08a73d4138c7e09eba8975746562c6b76 3742639 quassel_0.12.4.orig.tar.bz2
fcc7e69ace457c517a3642d28edb269e23ee3b41 22912 quassel_0.12.4-2+deb9u1.debian.tar.xz
Checksums-Sha256:
c93fa1f6869b0e0e8cef3c5ac43f576fff3a791abb94c8c95b2f8a5b90cc54b7 2697 quassel_0.12.4-2+deb9u1.dsc
93e4e54cb3743cbe2e5684c2fcba94fd2bc2cd739f7672dee14341b49c29444d 3742639 quassel_0.12.4.orig.tar.bz2
b22fea9cb072146f185b2b186eaad092fdcdd360e2ece3ba91f31035e38ece8e 22912 quassel_0.12.4-2+deb9u1.debian.tar.xz
Files:
e387c704709fe34d11808a81036ccfa9 2697 net optional quassel_0.12.4-2+deb9u1.dsc
56abcde46decc5e341888a05189cece3 3742639 net optional quassel_0.12.4.orig.tar.bz2
ca24e059306edf0d810f3e5e2071b8b0 22912 net optional quassel_0.12.4-2+deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=6Ehd
-----END PGP SIGNATURE-----
Reply to: