[ubuntu/lucid-security] dpkg_1.15.5.6ubuntu4.5_powerpc_translations.tar.gz, dpkg_1.15.5.6ubuntu4.5_sparc_translations.tar.gz (delayed), dpkg_1.15.5.6ubuntu4.5_i386_translations.tar.gz, dpkg_1.15.5.6ubuntu4.5_amd64_translations.tar.gz, dpkg_1.15.5.6ubuntu4.5_ia64_translations.tar.gz, dpkg_1.15.5.6ubuntu4.5_armel_translations.tar.gz, dpkg 1.15.5.6ubuntu4.5 (Accepted)

[Ubuntu Installer]

dpkg (1.15.5.6ubuntu4.5) lucid-security; urgency=low

  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Date: Thu, 06 Jan 2011 11:08:21 -0800
Changed-By: Kees Cook <kees at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/dpkg/1.15.5.6ubuntu4.5
-------------- next part --------------
Format: 1.8
Date: Thu, 06 Jan 2011 11:08:21 -0800
Source: dpkg
Binary: dpkg dpkg-dev dselect
Architecture: source
Version: 1.15.5.6ubuntu4.5
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 dpkg       - Debian package management system
 dpkg-dev   - Debian package development tools
 dselect    - Debian package management front-end
Changes: 
 dpkg (1.15.5.6ubuntu4.5) lucid-security; urgency=low
 .
   * SECURITY UPDATE: relative directory and symlink following in source pkgs.
     - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
       scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
       thanks to Raphael Geissert.
     - CVE-2010-1679
Checksums-Sha1: 
 c3bc1b728777dc4e4e8e7f00639fe4e41ed4cdcb 1351 dpkg_1.15.5.6ubuntu4.5.dsc
 6b57c49d9a5f09630a811a619d7b0011f738f08b 4682350 dpkg_1.15.5.6ubuntu4.5.tar.bz2
Checksums-Sha256: 
 b55585c2679790955d568668b3301ed1d0182aaa9f86ee784892a678110c93f7 1351 dpkg_1.15.5.6ubuntu4.5.dsc
 b07b1778274a884c42359e973a7b84f42a2cbee46997a4a417f2e82003e40d32 4682350 dpkg_1.15.5.6ubuntu4.5.tar.bz2
Files: 
 e9c42a50bdb677925283efd746d26827 1351 admin required dpkg_1.15.5.6ubuntu4.5.dsc
 0404022baa0d35a11724f6268f806f35 4682350 admin required dpkg_1.15.5.6ubuntu4.5.tar.bz2
Original-Maintainer: Dpkg Developers <debian-dpkg at lists.debian.org>