Accepted apt 1.0.9.8.6 (all source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 May 2020 16:49:11 +0200
Binary: apt-doc libapt-pkg-doc
Source: apt
Architecture: all source
Version: 1.0.9.8.6
Distribution: jessie-security
Urgency: high
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Julian Andres Klode <jak@debian.org>
Description:
apt-doc - documentation for APT
libapt-pkg-doc - documentation for APT development
Changes:
apt (1.0.9.8.6) jessie-security; urgency=high
.
* SECURITY UPDATE: Out of bounds read in ar, tar implementations (LP: #1878177)
- apt-pkg/contrib/arfile.cc: Fix out-of-bounds read in member name
- apt-pkg/contrib/arfile.cc: Fix out-of-bounds read on unterminated
member names in error path
- apt-pkg/contrib/extracttar.cc: Fix out-of-bounds read on unterminated
member names in error path
- CVE-2020-3810
Checksums-Sha1:
a268e5954897c5f3b5e31c81c0aaa07960c8788f 301264 apt-doc_1.0.9.8.6_all.deb
f7db8359b78a3cde0d1b26461a54b68e515d5569 749338 libapt-pkg-doc_1.0.9.8.6_all.deb
837611698f08d580ec82d397d6a8b9f836d3c6ab 2396 apt_1.0.9.8.6.dsc
8cd009cad3d41e0e9bc4454e5fd335219003fa6f 1784448 apt_1.0.9.8.6.tar.xz
Checksums-Sha256:
53cf1c4f68d93da2dd18f1a064c571add04e4aac41ac791ad0288481a6031e4b 301264 apt-doc_1.0.9.8.6_all.deb
c4ba58032485c34a3c01b96d2afc254b383df8fcf47e2a1176f5fde377fb3a90 749338 libapt-pkg-doc_1.0.9.8.6_all.deb
252f09e9a52a1470e1d38a98d313a7fe5e1737c775946f3348d0e10251d3ccfd 2396 apt_1.0.9.8.6.dsc
b1a430b0d2b54008f1cdc2b58e48a94bcc259f5b0c95cfa5450f00f5aa14e283 1784448 apt_1.0.9.8.6.tar.xz
Files:
b54ac6e04f16ff8bf04c459c55477412 301264 doc optional apt-doc_1.0.9.8.6_all.deb
2f046da708897df34495c52786c930ea 749338 doc optional libapt-pkg-doc_1.0.9.8.6_all.deb
b38035b3744a7bc6723cdda7f06c6388 2396 admin important apt_1.0.9.8.6.dsc
23a63fa0da30ba393ad73e35097b9d1a 1784448 admin important apt_1.0.9.8.6.tar.xz
-----BEGIN PGP SIGNATURE-----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=a2HO
-----END PGP SIGNATURE-----
Reply to: