Accepted s3ql 2.10.1+dfsg-4 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 25 Aug 2014 17:21:09 -0700
Source: s3ql
Binary: s3ql s3ql-dbg
Architecture: source amd64
Version: 2.10.1+dfsg-4
Distribution: unstable
Urgency: high
Maintainer: Nikolaus Rath <Nikolaus@rath.org>
Changed-By: Nikolaus Rath <Nikolaus@rath.org>
Description:
s3ql - Full-featured file system for online data storage
s3ql-dbg - Full-featured file system for online data storage (debugging symb
Changes:
s3ql (2.10.1+dfsg-4) unstable; urgency=high
.
* SECURITY UPDATE for CVE-2014-0485.
.
A remote code execution vulnerability was fixed.
.
An attacker with control over the communication with the storage
backend or the ability to manipulate the data stored in the
backend was able to trigger execution of arbitrary code by
mount.s3ql, fsck.s3ql, mkfs.s3ql, s3qladm and s3ql_verify. Both
encrypted and unencrypted file systems were vulnerable.
.
* Upload sponsored by Petter Reinholdtsen.
Checksums-Sha1:
bd3b82d4abfb6157bb0913c953e42a10ad11b036 1772 s3ql_2.10.1+dfsg-4.dsc
8f835000fbce2d1f00e08723c7921f51bac2ccf9 13876 s3ql_2.10.1+dfsg-4.debian.tar.xz
518ebba8f5b5bb1582ce5ce86f911e254fd12497 529328 s3ql_2.10.1+dfsg-4_amd64.deb
5dd5058e41e9aef22e602e969202970bee2fcbfa 246704 s3ql-dbg_2.10.1+dfsg-4_amd64.deb
Checksums-Sha256:
f4771aa23e8d32d0921ea7895e4bd6e96221ab0ae08d8ad98262737e52352005 1772 s3ql_2.10.1+dfsg-4.dsc
6974984fbfd644406aac2169959895ca3425a7a0a29fa8fa118160a529621988 13876 s3ql_2.10.1+dfsg-4.debian.tar.xz
43060e26031e89f3be287e24604070c19b753958317fa9ce72f9b6f1f4d564da 529328 s3ql_2.10.1+dfsg-4_amd64.deb
b60b70862545ac0c8192652d1e20e11c9a693462c4a8f0f730554d9ea9d1b8f3 246704 s3ql-dbg_2.10.1+dfsg-4_amd64.deb
Files:
57eed192185324049be8c26f02065efb 529328 misc optional s3ql_2.10.1+dfsg-4_amd64.deb
4dbd1c4ce63a76c0eee9760c6a649f4a 246704 debug extra s3ql-dbg_2.10.1+dfsg-4_amd64.deb
2ba926894999c24cccaad33a91040931 1772 misc optional s3ql_2.10.1+dfsg-4.dsc
74d9827b7a2c5c7e5069ffae6f235585 13876 misc optional s3ql_2.10.1+dfsg-4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFT/sSs20zMSyow1ykRAviaAKCjNrWbQsRuChsiOskXYY4aBeKf8ACgsKWd
YqV5uqWRBLzrjSxTy9GoPNc=
=K94C
-----END PGP SIGNATURE-----
Reply to: