Just released, including security updates.
Updates in 2 source package(s), 4 binary package(s):
Source tzdata, binaries: tzdata:amd64 tzdata:arm64
tzdata (2018c-0+deb9u1) stretch; urgency=medium
* New upstream version, affecting the following past and future timestamps:
- São Tomé and Príncipe switched from +00 to +01 on 2018-01-01 at 01:00.
- Southern Brazil will begin DST on 2018-11-04 instead of 2018-10-21.
* debian/control: Update Vcs-Git and Vcs-Browser fields following the move
to Salsa.
Source libtasn1-6, binaries: libtasn1-6:amd64 libtasn1-6:arm64
libtasn1-6 (4.10-1.1+deb9u1) stretch-security; urgency=high
* Non-maintainer upload by the Security Team.
* _asn1_check_identifier: safer access to values read (CVE-2017-10790)
(Closes: #867398)
* _asn1_decode_simple_ber: restrict the levels of recursion to 3
(CVE-2018-6003)
https://cloud.debian.org/images/openstack/current-9/
--
Steve McIntyre, Cambridge, UK. steve@einval.com
"C++ ate my sanity" -- Jon Rabone
Attachment:
signature.asc
Description: PGP signature