Bug#924900: unblock: libzip/1.5.1-4
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Please unblock package libzip
libzip 1.5.1-4 contains fix for upstream issue that
can result in corrupted archive, I was poked by upstream
to fix this in Debian buster:
> We've fixed a serious bug in AES encryption today. With some
> particular file sizes the HMAC would not be written, and incomplete
> files were in the archive.
Thanks,
Ondrej
unblock libzip/1.5.1-4
- -- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-2-amd64 (SMP w/6 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_DK.UTF-8, LC_CTYPE=UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_DK.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAlyPVFpfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz
NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u
WcIEcQ//V14C6SH49m2im4pTgZJWqu2LY9w/rQzWC0dNq6LX6EQDorrh2x+ntvMf
DtuDK8dKdcpBQsbUVdUueaHP1UjdK31GDLFB5ITW19yO3ohdc87rWKH+Uyk7r1rO
pogWyLp20W0WPfIStn2+RdnVGZ7JavVoe5n8htIKoKgG341EauJcRVg1Mmdpzn75
xMePY4/J6XA5XDIl5IHieNjwEx6o0ALQE+oEa9IIt2aUtLzCNXVm1fTvSigXa31n
I0lsbnblrp5HdK/a2vADXtmHTicli9hqhj/7btGPp29WuCaYmjfteUfnsuX6S8mh
ySm/S+Ar0ijB1N4y2xIgXkFdSailWm8b7TE3x6rJGcxJ/tb765j1xC77XrRPydqr
Gt3jOg5o2UogYGdVrfBg1szM5zUv2RzSrJj7JZ/VGs1UObj0kqTV0TcMmTcheO4p
9dCZP6fMdagOsTNXDPV8zzdEn2eOn6E7IBE7tL8cXk/YddouP4S6kh6SroGQERuB
Xh6V8ZAzFXx/9xXNYmnWHFgprYbVBRpXL78Fs4fZZq3oO28UdCKg9zpG8kX8lLxQ
XS7rxt3sxcX1ngAS13tBOkWoVOmerZD0nbdRicu2MlP+4Eh30AUI6cqEpbb6pVl+
brQzvxOqVhkPLwgyiylvyt/8sMpaVMbN/z/hOZmnSihiLf0EROg=
=9+Ee
-----END PGP SIGNATURE-----
Reply to: