Accepted openocd 0.5.0-1+deb7u1 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 21 Jan 2018 13:27:35 +0100
Source: openocd
Binary: openocd
Architecture: source amd64
Version: 0.5.0-1+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Uwe Hermann <uwe@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
openocd - Open on-chip JTAG debug solution for ARM and MIPS systems
Changes:
openocd (0.5.0-1+deb7u1) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2018-5704: OpenOCD does not block attempts to use HTTP POST for
sending data to localhost, which allows remote attackers to conduct
cross-protocol scripting attacks, and consequently execute arbitrary
commands, via a crafted web site.
* Export CCACHE=none and add fix-ftbfs.patch to prevent a build failure in
the jimtcl submodule.
Checksums-Sha1:
afdab23d7dc1889df5cb8236e68396fd2caa0efa 2162 openocd_0.5.0-1+deb7u1.dsc
807e4214b005029dccd1ed8af36f3897a5c6f49b 2228655 openocd_0.5.0.orig.tar.bz2
c0a00792fa7fc50b42e07b3221ded4d35c7132e8 409908 openocd_0.5.0-1+deb7u1.debian.tar.xz
f8aec12e129212408c35ebe1980dac81c1e855e1 2722764 openocd_0.5.0-1+deb7u1_amd64.deb
Checksums-Sha256:
ad8cac54385c832eb88ac5e2a336b26d7335d5f5e224442a8054100523a614cf 2162 openocd_0.5.0-1+deb7u1.dsc
0bc122f98a6cd68c4392f6265d480b0e875ff54203ec05a5a52d23900903a78d 2228655 openocd_0.5.0.orig.tar.bz2
0e054813abac744b76ff49be6ad4cb3b76914daf79040c4e32d287da13d9f53a 409908 openocd_0.5.0-1+deb7u1.debian.tar.xz
8982b94830444394526b5b8e1988d2a50bb5752dca75bd0347d992c8f73cadd6 2722764 openocd_0.5.0-1+deb7u1_amd64.deb
Files:
3c5f1c5fd679670b560359b373b22408 2162 embedded extra openocd_0.5.0-1+deb7u1.dsc
43434c2b5353c9b853278b8bff22cb1a 2228655 embedded extra openocd_0.5.0.orig.tar.bz2
3819f66c2637c821960f9795aa70c438 409908 embedded extra openocd_0.5.0-1+deb7u1.debian.tar.xz
2d4460a1734732d7abbeed25379c70f6 2722764 embedded extra openocd_0.5.0-1+deb7u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=csNX
-----END PGP SIGNATURE-----
Reply to: