-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 12 Nov 2024 13:58:26 -0800
Source: openafs
Architecture: source
Version: 1.8.13-1
Distribution: unstable
Urgency: high
Maintainer: Benjamin Kaduk <kaduk@mit.edu>
Changed-By: Benjamin Kaduk <kaduk@mit.edu>
Closes: 1087406 1087407
Changes:
openafs (1.8.13-1) unstable; urgency=high
.
* New upstream security release:
- Fix OPENAFS-SA-2024-001: theft of credentials from Unix PAGs
(CVE-2024-10394)
- Fix OPENAFS-SA-2024-002: fileserver crash on malformed StoreACL
(CVE-2024-10396)
- Fix OPENAFS-SA-2024-003: buffer overflows in XDR responses
(CVE-2024-10397)
- Closes: #1087406, #1087407
Checksums-Sha1:
d7aeece6dd36d8b1499ad600112f21e68c064552 3650 openafs_1.8.13-1.dsc
1c03578cc50d62f212176853c9d1f1f99afbb8cf 6769268 openafs_1.8.13.orig.tar.xz
b4a5efbf0dbf7b8c40227d79402bd5af1ecccab7 140632 openafs_1.8.13-1.debian.tar.xz
ff25d50a68544bee2fd7df83e8ecfddcac6e27f5 17744 openafs_1.8.13-1_amd64.buildinfo
Checksums-Sha256:
a164cd732a236c090589c18846236bdc7b54e76187543e2810b70df5dbed34d4 3650 openafs_1.8.13-1.dsc
038f686aa122734651f3fe7358b7797c40fca6850016fd5ba4d22d532cb6ca3c 6769268 openafs_1.8.13.orig.tar.xz
1d85b0f37a679261e99b3b84b4471af37f7e844f3b47f35c2b62afb8a8b54a8d 140632 openafs_1.8.13-1.debian.tar.xz
f200f94c474a84b7b553bd4b323f98c2fd8e6c552a1c3a5772deeaf1b1b3e4f3 17744 openafs_1.8.13-1_amd64.buildinfo
Files:
f1ed1164346749fedaa0aa5b84822edc 3650 net optional openafs_1.8.13-1.dsc
241f8c67043a1b9d1238b508d80dd84c 6769268 net optional openafs_1.8.13.orig.tar.xz
a85077b3ac6fe8953ebce0a98fddf796 140632 net optional openafs_1.8.13-1.debian.tar.xz
e61202c3d28b262cb5d762f77703fb42 17744 net optional openafs_1.8.13-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=/4DF
-----END PGP SIGNATURE-----
Attachment:
pgprKpzeTIDJa.pgp
Description: PGP signature