-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 18 Dec 2011 20:44:15 +0100 Source: libpar-packer-perl Binary: libpar-packer-perl Architecture: armel Version: 1.006-1+squeeze1 Distribution: squeeze Urgency: low Maintainer: armel Build Daemon (arnold) Changed-By: Salvatore Bonaccorso Description: libpar-packer-perl - utility for creating PAR archives and stand-alone executables Closes: 650706 Changes: libpar-packer-perl (1.006-1+squeeze1) stable; urgency=low . * Team upload. * Add create-safe-temporary-directories.patch patch. Fixes CVE-2011-4114: PAR packed files are extracted to unsafe and predictable temporary directories. (Closes: #650706) * Bump (Build-)Depends on libpar-perl. Bump the dependencies to libpar-perl (>= 1.000-1+squeeze1) as this version contains the other half of the fix for CVE-2011-4114. * Add run_all_tests_using_a_nonce_PAR_TMPDIR.patch. Run all tests using a nonce PAR_TMPDIR (a leftover /tmp/par-USER directory from previous builds may now be considered "unsafe") Checksums-Sha1: d5660bcac5bab170223770d60c05fa1d8643f626 1656064 libpar-packer-perl_1.006-1+squeeze1_armel.deb Checksums-Sha256: a9326315f5facac160748dc5854ff3a1c6941533ee0c3001c71f69f80996060a 1656064 libpar-packer-perl_1.006-1+squeeze1_armel.deb Files: 5c7e67ab85e310a584373e96930b1d90 1656064 perl optional libpar-packer-perl_1.006-1+squeeze1_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJO+0/tAAoJENZrRcGO+KlaMVQQAK8LSpobQmv6WqgwNEIqOh4g ZmyxuFwb/2QnpdA7A9gMZ4f5PxbODF0WLlBZpztNN7dcDeWB1xXkwqg6iN4zay4h FLgSS/OCVLHSRwEyWWk0wvwUsEYteKt8Qlf4GqPBicYXU9kxIhdoLc0j71vh9pUP NbMg4+u0o7SvfADCOL88Oj8lxa+0zSERVIg5zglQWDWuZ1Km4iDwT/rDryI4VeSx UhhdUD9DnQ71NCiIdNCSCbNaAy+Xv3aPConODN1RripLSjMQJfjG57gOXA7iXuLe 5UKdzMhfyGXzpmiPye2ULgQbzow0Gt4AHKAW33BEl6i67F3qTu5NLlZzgSHPKpY9 Wsl9Siqvdi8Jbn/fMDv/nHBb+MnrfbSmmH8CrwwBphBVhad8N4iEckIcSSin+x2p MIflmjz/75r45cCvVerE9Fqad37QVJ5tfxW2bfjKf0GSBzeiP//XBdTovf1YZqpQ ZRaXsCSbtLLZ+XJxwR/O4n20swIFq1H+02kjJCs78WxTPwKcIJERZAWE98Mu9w1T jQsEIhedUIiqhJrNi/1MG6YPl3G01wyG8cX8cIEe9mnWfFKS90mAmFgqnpcoEaYH UV8ZzK6PnbgQObyr7D+JqVlv1euHv4HCoCfXr5OrXS6K0MCGWak2pVkgpdjmGAzp D8kVE/x2vZVUrVIjvgch =XeFu -----END PGP SIGNATURE-----