Installed slrn 0.9.6.2-9 (source i386)
Installed:
slrn_0.9.6.2-9_i386.deb
to dists/woody/main/binary-i386/news/slrn_0.9.6.2-9.deb
replacing slrn_0.9.6.2-8.deb
slrn_0.9.6.2-9.diff.gz
to dists/woody/main/source/news/slrn_0.9.6.2-9.diff.gz
replacing slrn_0.9.6.2-8.diff.gz
slrnpull_0.9.6.2-9_i386.deb
to dists/woody/main/binary-i386/news/slrnpull_0.9.6.2-9.deb
replacing slrnpull_0.9.6.2-8.deb
slrn_0.9.6.2-9.dsc
to dists/woody/main/source/news/slrn_0.9.6.2-9.dsc
replacing slrn_0.9.6.2-8.dsc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.6
Date: Thu, 22 Jun 2000 18:26:33 -0700
Source: slrn
Binary: slrn slrnpull
Architecture: source i386
Version: 0.9.6.2-9
Distribution: unstable
Urgency: low
Maintainer: Joey Hess <joeyh@debian.org>
Description:
slrn - threaded news reader (fast for slow links)
slrnpull - pulls a small newsfeed from an NNTP server
Changes:
slrn (0.9.6.2-9) unstable; urgency=low
.
* Applied a patch from
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=12750 to fix
dozens of potential buffer overrun holes in slrn and slrnpull. These
include local environment variable overruns which Debian should not be
vulnerable to, since nothing in this package is installed setuid or
setgid (unlike Red Hat). It also includes theoretical remote exploits by
poisening newsgroup data. All theoretical, so I am not uploading it to
frozen, but I might as well apply the patch.
Files:
b0fea739fcde9fe4dd06f1e7e9e62b60 570 news optional slrn_0.9.6.2-9.dsc
89d3c433e07a0bddd4adf7348b2579f7 18221 news optional slrn_0.9.6.2-9.diff.gz
7d97d5830657c63d7a93bb6fc92f7ed3 195964 news optional slrn_0.9.6.2-9_i386.deb
d3c3213b957e8177b995e3b95261c122 67452 news optional slrnpull_0.9.6.2-9_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE5Ur/S2tp5zXiKP0wRAuj4AJ4xK7cGGwV6hopM8jO1dfNeiVhe/ACcDN6l
CFwEQRlcFXAnSFsuo8xIDa4=
=TJ1q
-----END PGP SIGNATURE-----
Reply to: