Accepted lha 1.14i-10 (source)
Ubuntu Archive Auto-Sync
katie at jackass.ubuntu.com
Fri Feb 4 13:45:23 CST 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Origin: Debian/unstable
Format: 1.7
Date: Fri, 04 Feb 2005 19:16:37 +0000
Source: lha
Binary: lha
Architecture: source
Version: 1.14i-10
Distribution: hoary
Urgency: high
Maintainer: GOTO Masanori <gotom at debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Description:
lha - lzh archiver
Closes: 277545 279870
Changes:
lha (1.14i-10) unstable; urgency=high
.
* debian/patch.redhat-sec2: Add one more security patch to fix:
- CAN-2004-0771 (-w working directory option buffer overflow)
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0771
- CAN-2004-0769 (buffer overflow can be executed arbitrary code
via long pathnames in headers, another issue of bug fixed in -9)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0769
- CAN-2004-0745 (execute arbitrary commands via a directory with
shell metacharacters in its name.)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0745
- CAN-2004-0694 (reserved number)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0694
taken from RedHat patch. (Closes: #279870)
* man/lha.n: Fix typo "flie" instead of "file". (Closes: #277545)
Files:
5a57306a67be3f77bfb5ece08374180b 43875 non-free/utils optional lha_1.14i-10.diff.gz
92158fe6e164862496138a410173a323 546 non-free/utils optional lha_1.14i-10.dsc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iQEVAwUBQgPKFQF4adwMEr3XAQJuEAgAsKSc5BnwsY8yzHODRTWQCgfXylLFQzUx
P7Iiumq+OkXx6BdjseAFJ2j7obZFI6hj5Apxa+a5BPk0V9zkbB9myORnpiQWgri2
Ewz3ljMQuazOqXFEBTQCPq8vQh1Po+RyVrwd140YaDK5/ONwFzv5f0qGowzQPqxl
+Rpyn+oFrFxcAfpy2zGXU2Nf67sEhpNdD+VgbO6+rKVI42j8PUq730Gyi8GEKHEu
6n/vgOviyA7bzqEMTYpf62r8qhFsFjJrcQqmtmusJjFln5JJmtNoI9h7nKLqVzJL
J8IRFxrhStYc0aqtYiZuJTMdRHBBrqHAMCy2YuCbambqO6aAIbM2NQ==
=49In
-----END PGP SIGNATURE-----
Accepted:
lha_1.14i-10.diff.gz
to pool/multiverse/l/lha/lha_1.14i-10.diff.gz
lha_1.14i-10.dsc
to pool/multiverse/l/lha/lha_1.14i-10.dsc
More information about the hoary-changes
mailing list