-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 20:44:15 +0100 Source: libpar-packer-perl Binary: libpar-packer-perl Architecture: sparc Version: 1.006-1+squeeze1 Distribution: squeeze Urgency: low Maintainer: sparc Build Daemon (spontini) Changed-By: Salvatore Bonaccorso Description: libpar-packer-perl - utility for creating PAR archives and stand-alone executables Closes: 650706 Changes: libpar-packer-perl (1.006-1+squeeze1) stable; urgency=low . * Team upload. * Add create-safe-temporary-directories.patch patch. Fixes CVE-2011-4114: PAR packed files are extracted to unsafe and predictable temporary directories. (Closes: #650706) * Bump (Build-)Depends on libpar-perl. Bump the dependencies to libpar-perl (>= 1.000-1+squeeze1) as this version contains the other half of the fix for CVE-2011-4114. * Add run_all_tests_using_a_nonce_PAR_TMPDIR.patch. Run all tests using a nonce PAR_TMPDIR (a leftover /tmp/par-USER directory from previous builds may now be considered "unsafe") Checksums-Sha1: d1cfbed25bf9302e2a7de2c18bd665482ea368c9 1727470 libpar-packer-perl_1.006-1+squeeze1_sparc.deb Checksums-Sha256: b90ab85ddce103badaec47f2a1aa0c63ec022da2ea3693cd91e764c72a833346 1727470 libpar-packer-perl_1.006-1+squeeze1_sparc.deb Files: 6d44c57302f819fa7f43d7a97564c5b6 1727470 perl optional libpar-packer-perl_1.006-1+squeeze1_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO+zfmAAoJEErIoNUNTAQMMSAQAJh78IQgHE01n4SzYjRuFZjX DCN6HQnYnZQ4bAiRTAk7aWeK8WuiXFYL3P3hFFxi5FMGf8HbU9GUOfsnFeMK1NTQ 7JUxVSWGPMCc1t0AGpx6+0plURxPDFlaaBjJ6gvQy1bgl2qk/v+IHmNJQMLAdmO0 26C7rXqNeb2m95eRwYZM77KyCVyV00fcikIG5kyZYG00HxE+i5ip6s4u8bCDYh/7 layy4PPhdCQeiu3p7wdEl7ba75Y0mbCM8/0YDr++aN79TilnU12mmoUw8ayHhvvT zM0kDfLanvptSN2N+hvSUkDZ6Z49oOzunP7VtbwoRqkpB4qg2af356YrV+aei8Se 5fhL+Qw5Z7jgskznOicTZPVrzo4eAlUeGaayEBzhVDfy6ZKj6tEKfXhbnx2iYhUg +gAugmOW1mmmzbrgUR5qve1nOHyiEgucIUzheiiKXUy2uNGM5i99kTC6Od+rrh9/ BwlVQTAs7ZJ5yDTjYqWXGK4nFgQQxNsHnKw+/PdTWlu9L/rBsresc2Cdj4WDN7bV MdcK53c6QlX2OC0Fz2OFqLfAugYyQW7DniIx+GHZhmrm8dvxhwofT1YH/eEg4Yk7 8OC1ruOPWexRdRc1fV04M3Nrrd6OigSAm7siVrWyARfu+yhvey255eUX0+tF9BLK dG0u+cFsQX2XUXzymlvW =RBPX -----END PGP SIGNATURE-----