Accepted collectd 5.1.0-3+deb7u3 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 04 Apr 2017 16:45:15 +0200
Source: collectd
Binary: collectd-core collectd collectd-utils collectd-dbg collectd-dev libcollectdclient-dev libcollectdclient0
Architecture: source amd64 all
Version: 5.1.0-3+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Sebastian Harl <tokkee@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
collectd - statistics collection and monitoring daemon
collectd-core - statistics collection and monitoring daemon (core system)
collectd-dbg - statistics collection and monitoring daemon (debugging symbols)
collectd-dev - statistics collection and monitoring daemon (development files)
collectd-utils - statistics collection and monitoring daemon (utilities)
libcollectdclient-dev - client library for collectd's control interface (development file
libcollectdclient0 - client library for collectd's control interface
Closes: 859494
Changes:
collectd (5.1.0-3+deb7u3) wheezy-security; urgency=high
.
* CVE-2017-7401: Fix an endless loop DoS vulnerability in parse_packet().
When a correct "Signature part" is received by a Collectd instance
configured without the AuthFile option, an endless loop occurs due to a
missing pointer increment to the next unprocessed part. (Closes: #859494)
Checksums-Sha1:
f27d4481563a30cf163362eecd9a8f40c7bf1456 3319 collectd_5.1.0-3+deb7u3.dsc
55f17b17a10710641a9bf4e8c5332cef661cafcd 1630323 collectd_5.1.0.orig.tar.gz
b0205b4279c19a58a32033c3d9909fd4128f1c16 72374 collectd_5.1.0-3+deb7u3.diff.gz
10f2f26ffa00879810cae42317e7a4596ca50745 915750 collectd-core_5.1.0-3+deb7u3_amd64.deb
e1cc552d65182fb90276f12fbe28b366fac7f080 76876 collectd_5.1.0-3+deb7u3_amd64.deb
9a208840ff9deb42a5fb5b48dc37555cd5fc7a28 88538 collectd-utils_5.1.0-3+deb7u3_amd64.deb
3ef0a40fef1f20cdc7a1c3f2916999b9bd200471 1349364 collectd-dbg_5.1.0-3+deb7u3_amd64.deb
e6ba37d0d0e26b5e9e8c656c8ef1fb769c3161d1 71432 libcollectdclient-dev_5.1.0-3+deb7u3_amd64.deb
37734e82799af7e48c83dcc1f2e8836893f887de 77940 libcollectdclient0_5.1.0-3+deb7u3_amd64.deb
91659bef3dabdfcf311206e55e17ba493bf16bed 112812 collectd-dev_5.1.0-3+deb7u3_all.deb
Checksums-Sha256:
00d8f21dae7b850d52da9dd7937e0703f68621ee076318913ffc9674fd332372 3319 collectd_5.1.0-3+deb7u3.dsc
8e06c03c5467f3021565570fc86c931a43579aa6dad25ca5999d66850cd19927 1630323 collectd_5.1.0.orig.tar.gz
38795ffb3a6edffdab01516825d62e98ca9681036d98b717b9a6c4c18cfbd525 72374 collectd_5.1.0-3+deb7u3.diff.gz
29f7fc252ae0d404004244c25fdb975ac788fa2b8bb33bbd4cac34f7d05cc66e 915750 collectd-core_5.1.0-3+deb7u3_amd64.deb
825af876d583e2a4f661664b7d0c455bf155bc24f0c6c0b4d6d8428ae9f0dbf7 76876 collectd_5.1.0-3+deb7u3_amd64.deb
c60dcc3bcbfa5f282f571b0962843a8d2a669ef47009b2934e00e99b37408e23 88538 collectd-utils_5.1.0-3+deb7u3_amd64.deb
ac3612105deff578143929305ae4411cc6fe1eda7db12ec119904e48d91f0621 1349364 collectd-dbg_5.1.0-3+deb7u3_amd64.deb
7d80b72b54b633ddd21fc44a60c691c9719f879efded200354836036220612a5 71432 libcollectdclient-dev_5.1.0-3+deb7u3_amd64.deb
9ce535a8711a7ae0134286fe205ebc7cf1d0880aced50affb7696c6840b21a11 77940 libcollectdclient0_5.1.0-3+deb7u3_amd64.deb
f9a9270679539eea70382d0711bb50e991ec271acdb003716b4cd9c479462897 112812 collectd-dev_5.1.0-3+deb7u3_all.deb
Files:
6681a424bb517875fb00323fbaaa4ef8 3319 utils optional collectd_5.1.0-3+deb7u3.dsc
adc58a0d448a359ecf737da9398898c6 1630323 utils optional collectd_5.1.0.orig.tar.gz
9e39e11dd4081f180fc575ef2dfaa494 72374 utils optional collectd_5.1.0-3+deb7u3.diff.gz
7cff8fbe01d5248814ed222eb42d6cc7 915750 utils optional collectd-core_5.1.0-3+deb7u3_amd64.deb
79a06641bd4de0508b7a16f78bf43690 76876 utils optional collectd_5.1.0-3+deb7u3_amd64.deb
b6d639bcf8cd458f7a0a05ec04fecf08 88538 utils optional collectd-utils_5.1.0-3+deb7u3_amd64.deb
9a90a5bc99aa04915a21615cd442675c 1349364 debug extra collectd-dbg_5.1.0-3+deb7u3_amd64.deb
9e0393ff998b58b4ebc6411ba0d0b7a0 71432 libdevel optional libcollectdclient-dev_5.1.0-3+deb7u3_amd64.deb
de52e47f3ee7caf212d5fc1dfa8546cc 77940 libs optional libcollectdclient0_5.1.0-3+deb7u3_amd64.deb
4c0e955cef13fb3e0b71a7e77c9c2cef 112812 utils optional collectd-dev_5.1.0-3+deb7u3_all.deb
-----BEGIN PGP SIGNATURE-----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=lFnB
-----END PGP SIGNATURE-----
Reply to: