Your message dated Thu, 01 Nov 2018 19:56:32 +0000 with message-id <E1gIJ4y-0004n0-I3@fasolo.debian.org> and subject line Bug#912336: fixed in wesnoth-1.12 1:1.12.6-1+deb9u1 has caused the Debian Bug report #912336, regarding pu: package wesnoth-1.12/1:1.12_1.12.6-1+deb9u1 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 912336: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912336 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: pu: package wesnoth-1.12/1:1.12_1.12.6-1+deb9u1
- From: Rhonda D'Vine <rhonda@debian.org>
- Date: Tue, 30 Oct 2018 15:29:26 +0100
- Message-id: <20181030142926.1593.16966.reportbug@anguilla.debian.or.at>
Package: release.debian.org Severity: normal User: release.debian.org@packages.debian.org Usertags: pu Hi, for fixing CVE-2018-1999023 (see #911950 removal request ...) I propose the following upload and would like to receive an ACK for uploading the fixed package. Find here the corresponding debdiff. It was commited to a dedicated stretch branch on salsa too: -> https://salsa.debian.org/games-team/wesnoth/commit/bef5679dd This corresponds directly to the upstream fix of the issue here: -> https://github.com/wesnoth/wesnoth/commit/d911268a Thanks in advance for considering. I'll add this bug number into the changelog before uploading instead of the removal request one, which makes more sense. :) Enjoy, Rhonda #v+ diff -Nru wesnoth-1.12-1.12.6/debian/changelog wesnoth-1.12-1.12.6/debian/changelog --- wesnoth-1.12-1.12.6/debian/changelog 2016-05-21 08:48:55.000000000 +0200 +++ wesnoth-1.12-1.12.6/debian/changelog 2018-10-30 10:53:02.000000000 +0100 @@ -1,3 +1,10 @@ +wesnoth-1.12 (1:1.12.6-1+deb9u1) stretch; urgency=low + + * Security fix: disallow loading lua bytecode via load/dofile + (CVE-2018-1999023, closes: #911950) + + -- Rhonda D'Vine <rhonda@debian.org> Tue, 30 Oct 2018 10:53:02 +0100 + wesnoth-1.12 (1:1.12.6-1) unstable; urgency=medium * New upstream release. diff -Nru wesnoth-1.12-1.12.6/debian/patches/04CVE-2018-1999023 wesnoth-1.12-1.12.6/debian/patches/04CVE-2018-1999023 --- wesnoth-1.12-1.12.6/debian/patches/04CVE-2018-1999023 1970-01-01 01:00:00.000000000 +0100 +++ wesnoth-1.12-1.12.6/debian/patches/04CVE-2018-1999023 2018-10-30 10:53:02.000000000 +0100 @@ -0,0 +1,68 @@ +Author: gfgtdf vim:ft=diff: +Description: disallow loading lua bytecode via load/dofile (CVE-2018-1999023) +Origin: upstream, https://github.com/wesnoth/wesnoth/commit/d911268 + +--- a/src/ai/lua/core.cpp ++++ b/src/ai/lua/core.cpp +@@ -913,7 +913,7 @@ + + lua_ai_context* lua_ai_context::create(lua_State *L, char const *code, ai::engine_lua *engine) + { +- int res_ai = luaL_loadstring(L, code);//stack size is now 1 [ -1: ai_context] ++ int res_ai = luaL_loadbufferx(L, code, strlen(code), /*name*/ code, "t"); // [-1: AI code] + if (res_ai) + { + +@@ -943,7 +943,7 @@ + + lua_ai_action_handler* lua_ai_action_handler::create(lua_State *L, char const *code, lua_ai_context &context) + { +- int res = luaL_loadstring(L, code);//stack size is now 1 [ -1: f] ++ int res = luaL_loadbufferx(L, code, strlen(code), /*name*/ code, "t");//stack size is now 1 [ -1: f] + if (res) + { + char const *m = lua_tostring(L, -1); +--- a/src/lua/lbaselib.cpp ++++ b/src/lua/lbaselib.cpp +@@ -310,16 +310,17 @@ + size_t l; + const char *s = lua_tolstring(L, 1, &l); + const char *mode = luaL_optstring(L, 3, "bt"); ++ (void) mode; + int env = (!lua_isnone(L, 4) ? 4 : 0); /* 'env' index or 0 if no 'env' */ + if (s != NULL) { /* loading a string? */ + const char *chunkname = luaL_optstring(L, 2, s); +- status = luaL_loadbufferx(L, s, l, chunkname, mode); ++ status = luaL_loadbufferx(L, s, l, chunkname, "t"); + } + else { /* loading from a reader function */ + const char *chunkname = luaL_optstring(L, 2, "=(load)"); + luaL_checktype(L, 1, LUA_TFUNCTION); + lua_settop(L, RESERVEDSLOT); /* create reserved slot */ +- status = lua_load(L, generic_reader, NULL, chunkname, mode); ++ status = lua_load(L, generic_reader, NULL, chunkname, "t"); + } + return load_aux(L, status, env); + } +--- a/src/scripting/lua.cpp ++++ b/src/scripting/lua.cpp +@@ -1052,7 +1052,7 @@ + //lua uses '@' to know that this is a file (as opposed to a something as opposed to something loaded via loadstring ) + std::string chunkname = '@' + fname; + LOG_LUA << "starting to read from " << fname << "\n"; +- return lua_load(L, &lua_filestream::lua_read_data, &lfs, chunkname.c_str(), NULL); ++ return lua_load(L, &lua_filestream::lua_read_data, &lfs, chunkname.c_str(), "t"); + } + private: + char buff_[LUAL_BUFFERSIZE]; +@@ -4239,7 +4239,9 @@ + lua_State *L = mState; + + // Compile script into a variadic function. +- int res = luaL_loadstring(L, prog); ++ // pass 't' to prevent loading bytecode which is unsafe and can be used to escape the sandbox. ++ // todo: maybe allow a 'name' parameter to give better error messages. ++ int res = luaL_loadbufferx(L, prog, strlen(prog), /*name*/ prog, "t"); + if (res) + { + char const *m = lua_tostring(L, -1); diff -Nru wesnoth-1.12-1.12.6/debian/patches/series wesnoth-1.12-1.12.6/debian/patches/series --- wesnoth-1.12-1.12.6/debian/patches/series 2014-11-24 10:27:24.000000000 +0100 +++ wesnoth-1.12-1.12.6/debian/patches/series 2018-10-30 10:29:29.000000000 +0100 @@ -1,2 +1,3 @@ 02wesnoth-nolog-desktop-file 03wesnothd-name +04CVE-2018-1999023 #v-
--- End Message ---
--- Begin Message ---
- To: 912336-close@bugs.debian.org
- Subject: Bug#912336: fixed in wesnoth-1.12 1:1.12.6-1+deb9u1
- From: Rhonda D'Vine <rhonda@debian.org>
- Date: Thu, 01 Nov 2018 19:56:32 +0000
- Message-id: <E1gIJ4y-0004n0-I3@fasolo.debian.org>
Source: wesnoth-1.12 Source-Version: 1:1.12.6-1+deb9u1 We believe that the bug you reported is fixed in the latest version of wesnoth-1.12, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 912336@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Rhonda D'Vine <rhonda@debian.org> (supplier of updated wesnoth-1.12 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 30 Oct 2018 10:53:02 +0100 Source: wesnoth-1.12 Binary: wesnoth-1.12-data wesnoth-1.12-core wesnoth-core wesnoth-1.12-dbg wesnoth-1.12 wesnoth wesnoth-1.12-music wesnoth-music wesnoth-1.12-server wesnoth-1.12-tools wesnoth-1.12-httt wesnoth-1.12-tsg wesnoth-1.12-trow wesnoth-1.12-ttb wesnoth-1.12-ei wesnoth-1.12-utbs wesnoth-1.12-did wesnoth-1.12-nr wesnoth-1.12-sof wesnoth-1.12-sotbe wesnoth-1.12-l wesnoth-1.12-aoi wesnoth-1.12-thot wesnoth-1.12-low wesnoth-1.12-dm wesnoth-1.12-dw Architecture: source all amd64 Version: 1:1.12.6-1+deb9u1 Distribution: stretch Urgency: low Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org> Changed-By: Rhonda D'Vine <rhonda@debian.org> Description: wesnoth - fantasy turn-based strategy game - complete suite (metapackage) wesnoth-1.12 - fantasy turn-based strategy game - complete suite (branch 1.12) wesnoth-1.12-aoi - "An Orcish Incursion" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-core - fantasy turn-based strategy game (branch 1.12) wesnoth-1.12-data - data files for Wesnoth (branch 1.12) wesnoth-1.12-dbg - fantasy turn-based strategy game (debugging symbols for branch 1. wesnoth-1.12-did - "Descent Into Darkness" official campaign for Wesnoth (branch 1.1 wesnoth-1.12-dm - "Delfador's Memoirs" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-dw - "Dead Water" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-ei - "The Eastern Invasion" official campaign for Wesnoth (branch 1.12 wesnoth-1.12-httt - "Heir to the Throne" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-l - "Liberty" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-low - "Legend of Wesmere" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-music - music files for Wesnoth (branch 1.12) wesnoth-1.12-nr - "Northern Rebirth" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-server - multiplayer network server for Wesnoth (branch 1.12) wesnoth-1.12-sof - "The Sceptre of Fire" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-sotbe - "Son of the Black-Eye" official campaign for Wesnoth (branch 1.12 wesnoth-1.12-thot - "The Hammer of Thursagan" official campaign for Wesnoth (branch 1 wesnoth-1.12-tools - tools for campaign developers for Wesnoth (branch 1.12) wesnoth-1.12-trow - "The Rise of Wesnoth" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-tsg - "The South Guard" official campaign for Wesnoth (branch 1.12) wesnoth-1.12-ttb - "A Tale of Two Brothers" official campaign for Wesnoth (branch 1. wesnoth-1.12-utbs - "Under the Burning Suns" official campaign for Wesnoth (branch 1. wesnoth-core - fantasy turn-based strategy game (metapackage) wesnoth-music - music files for Wesnoth (metapackage) Closes: 912336 Changes: wesnoth-1.12 (1:1.12.6-1+deb9u1) stretch; urgency=low . * Security fix: disallow loading lua bytecode via load/dofile (CVE-2018-1999023, closes: #912336) Checksums-Sha1: 541b31c7b9fd2a9f8352edaf8aeee3ea113b12de 4036 wesnoth-1.12_1.12.6-1+deb9u1.dsc e89038516bc26c6463f33e9a84acee69d5c8bb4d 67296 wesnoth-1.12_1.12.6-1+deb9u1.debian.tar.xz 4e0d91d4dc000e03bd7cecc8484ebea91ae7a55c 4193260 wesnoth-1.12-aoi_1.12.6-1+deb9u1_all.deb cba59f88cea7d8e49a8cf2cc98b41d3550b16672 4687982 wesnoth-1.12-core_1.12.6-1+deb9u1_amd64.deb 0a6419c796c7200078f500dc75618e8e8ff0c777 110811308 wesnoth-1.12-data_1.12.6-1+deb9u1_all.deb da68746e3b779470ae709ac8c897b943034e70e1 64326414 wesnoth-1.12-dbg_1.12.6-1+deb9u1_amd64.deb e535aeb9003d45e63f8a9fc7a0a86169a822b76a 4854514 wesnoth-1.12-did_1.12.6-1+deb9u1_all.deb 30f492d66effb450db8e673d1564ed80d15ef1e8 5361720 wesnoth-1.12-dm_1.12.6-1+deb9u1_all.deb eb67fc7b6db349a540109d774ac4ff0e9bb1bd0f 4980776 wesnoth-1.12-dw_1.12.6-1+deb9u1_all.deb 28683b26c31104699e95015da3e65de04f9c72fc 5151036 wesnoth-1.12-ei_1.12.6-1+deb9u1_all.deb 4e9af225c921bb23d396fd56575ae9a711f59af2 13061730 wesnoth-1.12-httt_1.12.6-1+deb9u1_all.deb fcc954a90808972cdcdfa33612e27faf3eec6ea1 5190728 wesnoth-1.12-l_1.12.6-1+deb9u1_all.deb 438550f7c0af2eefa3c184b737befdc58f2e41ec 8488006 wesnoth-1.12-low_1.12.6-1+deb9u1_all.deb 244a2dd51f3dfe7f3e1346216458053fbfa8467a 143780686 wesnoth-1.12-music_1.12.6-1+deb9u1_all.deb 5f5257faca2663889ba7c917c3b8fa12987aed13 5691606 wesnoth-1.12-nr_1.12.6-1+deb9u1_all.deb 260b135afe0a43031d4b3e6c600a5aa1c2b2f0b8 881992 wesnoth-1.12-server_1.12.6-1+deb9u1_amd64.deb acbbd3ba73f6a122221f3f0ff8ee7cd541003c0b 6733892 wesnoth-1.12-sof_1.12.6-1+deb9u1_all.deb eb8aa242176f493eca00053037348955d692201a 5990100 wesnoth-1.12-sotbe_1.12.6-1+deb9u1_all.deb 716b175daac7b8a76db10af7718858564befde52 6272556 wesnoth-1.12-thot_1.12.6-1+deb9u1_all.deb dc3223a64662da010feea1c708bdb0d419e735a2 1598146 wesnoth-1.12-tools_1.12.6-1+deb9u1_all.deb def338fca86b86531953ef7d0da566d1e13e8738 13105626 wesnoth-1.12-trow_1.12.6-1+deb9u1_all.deb 4c7d2f3d8cb331d423a3898fb20cbc2f406ec54e 7086112 wesnoth-1.12-tsg_1.12.6-1+deb9u1_all.deb b31e1f817d860d4d2d5841a76b5ea96f259fee21 5443886 wesnoth-1.12-ttb_1.12.6-1+deb9u1_all.deb 91716158266ce781fc67d059d78729560b4488d7 5356800 wesnoth-1.12-utbs_1.12.6-1+deb9u1_all.deb b07b4d21dbd92a066d62487fe36329996e7da230 1416 wesnoth-1.12_1.12.6-1+deb9u1_all.deb 01aa463c41292f7df4e1e5a8d43fbb52c3042218 22322 wesnoth-1.12_1.12.6-1+deb9u1_amd64.buildinfo 6c60936da6fc44b7ba6a4fc62518c9ad6df2b7ad 1040 wesnoth-core_1.12.6-1+deb9u1_all.deb 5394aed1344f5416af74b6023b452b8f4dfe0c25 1014 wesnoth-music_1.12.6-1+deb9u1_all.deb 28379e8be26df5c8a9da3f779ad002883686ca9b 1136 wesnoth_1.12.6-1+deb9u1_all.deb Checksums-Sha256: cf083230325e9f88c2ac8882a066a2d99ea4a12ac30980536ca1f48da3160f77 4036 wesnoth-1.12_1.12.6-1+deb9u1.dsc 9faa5f68a8267b35b93e601293ea24d544ec8d497326a2c657418dde4245d674 67296 wesnoth-1.12_1.12.6-1+deb9u1.debian.tar.xz fde590ec7d1f90c1d1a56089795b9f77d849da93bf62554a6ffbaec271d0953e 4193260 wesnoth-1.12-aoi_1.12.6-1+deb9u1_all.deb df639371f4acd248c4f1316a8c3c00fbd25d45fb363431d3fac8dc99c835c4a6 4687982 wesnoth-1.12-core_1.12.6-1+deb9u1_amd64.deb 8e35415d9b2b2de0acd5d5264936c4a4a30a5e77481471d69be7400c4a377d00 110811308 wesnoth-1.12-data_1.12.6-1+deb9u1_all.deb c2c504655284c19c758538bebb99ad9dcff4a79996e800fdf90a5975e5748173 64326414 wesnoth-1.12-dbg_1.12.6-1+deb9u1_amd64.deb 8ed02ddd0d7af3b87bfb10337ea0e6eca709623475d56be3d0e7f8a5e2344446 4854514 wesnoth-1.12-did_1.12.6-1+deb9u1_all.deb f51cbe5c3bd08977732496b4eeafb4fb379ab5df5e5ebd5a99acadd3698a66a4 5361720 wesnoth-1.12-dm_1.12.6-1+deb9u1_all.deb 991a440bd85c80a0a4b095f3a02edc1ba36a2ca09ac91ad0a9fcb087d0cd37fc 4980776 wesnoth-1.12-dw_1.12.6-1+deb9u1_all.deb 541e0ef1361751dc4493ce4f3426ef4e7827362812af7151d06e5165febf3705 5151036 wesnoth-1.12-ei_1.12.6-1+deb9u1_all.deb 8875a0fc15d283f44518565c4f8120d3b75677df719d6e7a97c6441b7b467f7d 13061730 wesnoth-1.12-httt_1.12.6-1+deb9u1_all.deb 642aa5a131f75b871cac5b779e1ebb6611dae1cd3c8f3a192da3868498b52704 5190728 wesnoth-1.12-l_1.12.6-1+deb9u1_all.deb 9ff397a56b3efa84f69fea960ace1f671757d65495fb7c87948617e05c3ceb0d 8488006 wesnoth-1.12-low_1.12.6-1+deb9u1_all.deb c2ad1a870fff2cd1722d5b0a216612e826d46c40771f5d6d065b0641d0c66811 143780686 wesnoth-1.12-music_1.12.6-1+deb9u1_all.deb ef6c928e6d1a30d47b14ac4f8adc631528e27ce7fb3a50aee2667ec63f467320 5691606 wesnoth-1.12-nr_1.12.6-1+deb9u1_all.deb 0abf1dc3535584696cf5bc1837d271e021988bebbd8e910320c24a344bc7d3b4 881992 wesnoth-1.12-server_1.12.6-1+deb9u1_amd64.deb 9f620e2facaac17f90ad12ae469cc596513b29b658d9068849a23b36a44a2c98 6733892 wesnoth-1.12-sof_1.12.6-1+deb9u1_all.deb fbffa982bddecc4ebee6921f475b32c708ddff50ca9a7e5e4f6454b46ededd14 5990100 wesnoth-1.12-sotbe_1.12.6-1+deb9u1_all.deb ec816b8c9ebf021db18849c877f316c1ead973db47570ce68143fe66768ade29 6272556 wesnoth-1.12-thot_1.12.6-1+deb9u1_all.deb 070578e945860b0af37466ff0d3e4c15bd0fa77395303dc41954bdd96702422d 1598146 wesnoth-1.12-tools_1.12.6-1+deb9u1_all.deb ca61c4af6acaebe000fdc55ae4d2464f6abf3c9908204450d09a7ab39fbe7aa6 13105626 wesnoth-1.12-trow_1.12.6-1+deb9u1_all.deb 2800d13765137c32c96e91ec980e0f9e2c0c86810c785d57938966b8822868cd 7086112 wesnoth-1.12-tsg_1.12.6-1+deb9u1_all.deb c979e164d0ecdcf177eae6556fbc67f10d448c6fae0d4e0c46299d512173ab7a 5443886 wesnoth-1.12-ttb_1.12.6-1+deb9u1_all.deb 21e40c54e7a6383bae85a259e4095e9d8670b861ff9b714ac8c100f2c0dd016a 5356800 wesnoth-1.12-utbs_1.12.6-1+deb9u1_all.deb 7a8419d13a2ca782bbc8571361cad9fed0f6763da13cedd80e532e50a3067492 1416 wesnoth-1.12_1.12.6-1+deb9u1_all.deb e3743946dd3659e37422a599f0f22874cd7a38cf6b675bef0d30d8b2ba12226b 22322 wesnoth-1.12_1.12.6-1+deb9u1_amd64.buildinfo 5ba0b855bffe667ff2e5c3544a0f2f492c899990ed5507b5cc67a818728d4dd3 1040 wesnoth-core_1.12.6-1+deb9u1_all.deb 99b4c7feaa5dbcf66919241b1094c94491c66d41786f9e20c04dbfb7bf7a31ea 1014 wesnoth-music_1.12.6-1+deb9u1_all.deb d2ee35a2a668fce93ffdd5d01749fe4d4590256ac36f6559132acf1282a31e78 1136 wesnoth_1.12.6-1+deb9u1_all.deb Files: f205091da29f2bf3bcfc11823e88e58b 4036 games optional wesnoth-1.12_1.12.6-1+deb9u1.dsc 369c788e3789ab59a3c64d663d4f3e7b 67296 games optional wesnoth-1.12_1.12.6-1+deb9u1.debian.tar.xz d8492052d7447d0bf83b6f5146d2a1a9 4193260 games optional wesnoth-1.12-aoi_1.12.6-1+deb9u1_all.deb 5b391096f80d83533e18bbe943ad4032 4687982 games optional wesnoth-1.12-core_1.12.6-1+deb9u1_amd64.deb c59920ebe1eb8ee92c09a079d9389f7e 110811308 games optional wesnoth-1.12-data_1.12.6-1+deb9u1_all.deb 6592ce9afbc56dc5e0e83dc5072d3726 64326414 debug extra wesnoth-1.12-dbg_1.12.6-1+deb9u1_amd64.deb c478502015760e3e226975511ba9f667 4854514 games optional wesnoth-1.12-did_1.12.6-1+deb9u1_all.deb 23cf98daedd08878bf52173cec336b86 5361720 games optional wesnoth-1.12-dm_1.12.6-1+deb9u1_all.deb e323fdff1ac88c18ec23bfa460bd45fb 4980776 games optional wesnoth-1.12-dw_1.12.6-1+deb9u1_all.deb 475501e688f73638be1f70b1effff237 5151036 games optional wesnoth-1.12-ei_1.12.6-1+deb9u1_all.deb 2736e276e09c99be87fbf8d243e7f247 13061730 games optional wesnoth-1.12-httt_1.12.6-1+deb9u1_all.deb 2fe2755d6217eb717e45bd4544042e48 5190728 games optional wesnoth-1.12-l_1.12.6-1+deb9u1_all.deb 46c72ab75d8299aca876099598dc84a7 8488006 games optional wesnoth-1.12-low_1.12.6-1+deb9u1_all.deb 796b6cec8e47df5a4a8b0d24b877888a 143780686 games optional wesnoth-1.12-music_1.12.6-1+deb9u1_all.deb 3aa493837530b3db171d864ecfd03aef 5691606 games optional wesnoth-1.12-nr_1.12.6-1+deb9u1_all.deb ef340b7269dca8302a74b6b421da803a 881992 games optional wesnoth-1.12-server_1.12.6-1+deb9u1_amd64.deb 639cd164bb4cd0bb970e1fc465b21925 6733892 games optional wesnoth-1.12-sof_1.12.6-1+deb9u1_all.deb bc722d20735a6f7eeb9750eeb6e244f2 5990100 games optional wesnoth-1.12-sotbe_1.12.6-1+deb9u1_all.deb cb39bef5d0cf84acfff5ff0f3b4018fd 6272556 games optional wesnoth-1.12-thot_1.12.6-1+deb9u1_all.deb 71c561c1d1bda62424f982da7cd19d9c 1598146 games optional wesnoth-1.12-tools_1.12.6-1+deb9u1_all.deb 8f7efdb15dbfe124f128c1c06e207d22 13105626 games optional wesnoth-1.12-trow_1.12.6-1+deb9u1_all.deb 962a58b20369aa80b2748ce553d27205 7086112 games optional wesnoth-1.12-tsg_1.12.6-1+deb9u1_all.deb 2befa15d80a391638c780273cd491b13 5443886 games optional wesnoth-1.12-ttb_1.12.6-1+deb9u1_all.deb 7cd3c8c07c437b2321f7bf15d305ec17 5356800 games optional wesnoth-1.12-utbs_1.12.6-1+deb9u1_all.deb 644578bc9ee4f09c08ada49f1eda7f97 1416 games optional wesnoth-1.12_1.12.6-1+deb9u1_all.deb afa99452b5feefa027c5aa2a66dfc7cd 22322 games optional wesnoth-1.12_1.12.6-1+deb9u1_amd64.buildinfo c1b094e6f856ace16602b0a3946d8018 1040 games optional wesnoth-core_1.12.6-1+deb9u1_all.deb ebeb76609e461f57add59a295f65aba8 1014 games optional wesnoth-music_1.12.6-1+deb9u1_all.deb 69bfe39001c72060004d82a13a0361a3 1136 games optional wesnoth_1.12.6-1+deb9u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEELHLzKO0XByBPs0mU3ugEPuF+uzAFAlvZn90ACgkQ3ugEPuF+ uzDPsg//aPONL/RXcsnwgZe/1WXxyxBtcwXlGzNN0oSHeVU5BgUuAqMAJl0nDp3M lKUyInOtaRmxPBpvWAqKxlhJEM/g7jpBW7XOYd+fiMzgiaPK9NoKtOKdJmuQWkWa 7z3gyF0cprsYMcUdV+/AI/tTfK2IyM3Smsvvdrggm0+7iXWKQ5eayfsa2NsGVKob d9Mag9v57QNKwNguYA7cr+nEaXUiJgtP9FEa5dGGvNRhcfRceam2vL087JdsQ5aD 9ay7KE1bwGaUioRUbtKiK/afgUk3h06th1rRk4QoEXtXOcumN2f92/21SDCa6hpc EdfiiqvfrZdLdrB+chCZ8jFsY+x7XaOL2Hz7/0X8j4FTMv2+yWb7bmPuEvUkv8rP WXxoNhRbds6s184cg1nogGCppfmcC8uHBR43YY8lgPxutccxNTGSDb9SZzJS2gys 4yCx4dY3sKsLJ5xSXbe40T3+2zqbjT5JooyPhi9JlgBc5UwYp5+Y7QwseSBDHJq1 X2joS/xnePLzvKx4gc4KgN2+3h65YorUg5eg7efVeBM3CWc08UR2Cojd5nBO+YiS 8E7DkEu0IAGXMZTNw9xdgsvncUN3iuoJwW65ScnlRdm+Gxnm/FrjK/1NmZr6F7qI dOqUwLInxAOwMCJeAdYLBk8rQg2ZRmfDP5kQvTkBSg6FIBME6AY= =zMJJ -----END PGP SIGNATURE-----
--- End Message ---