-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: quassel Binary: quassel-core, quassel-client, quassel, quassel-data, quassel-client-kde4, quassel-kde4, quassel-data-kde4 Architecture: any all Version: 1:0.10.0-2.3+deb8u1 Maintainer: Thomas Mueller <[email protected]> Homepage: http://www.quassel-irc.org Standards-Version: 3.9.5 Build-Depends: debhelper (>= 9.20120417), libqt4-dev, cmake, libfontconfig1-dev, libfreetype6-dev, libpng-dev, libsm-dev, libice-dev, libxi-dev, libxrandr-dev, libxrender-dev, zlib1g-dev, libssl-dev, libdbus-1-dev, pkg-kde-tools, kdelibs5-dev, libqca2-dev, qt4-dev-tools, libqtwebkit-dev, libindicate-qt-dev, libdbusmenu-qt-dev Package-List: quassel deb net optional arch=any quassel-client deb net optional arch=any quassel-client-kde4 deb net optional arch=any quassel-core deb net optional arch=any quassel-data deb net optional arch=all quassel-data-kde4 deb net optional arch=all quassel-kde4 deb net optional arch=any Checksums-Sha1: 305d56774b1af2a891775a5637174d9048d875a7 2873233 quassel_0.10.0.orig.tar.bz2 45b85dcf01d3916016c0b15aac6927d53f53993d 22704 quassel_0.10.0-2.3+deb8u1.debian.tar.xz Checksums-Sha256: 68228ce23aa3a992add3d00cb1e8b4863d8ca64bea99c881edf6d16ff9ec7c23 2873233 quassel_0.10.0.orig.tar.bz2 0aceb0c8d53dc194f2894e1f877d2313dd1e968042400b3daa40e08a26a47e58 22704 quassel_0.10.0-2.3+deb8u1.debian.tar.xz Files: 382466a7790979c172b7d7edf10a2981 2873233 quassel_0.10.0.orig.tar.bz2 bc36915aecdb9415595a9e64f2bfbcde 22704 quassel_0.10.0-2.3+deb8u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJVT3cdAAoJEP4ixv2DE11FelMP/idIr7VjuU87/2bgSyMr3nHp eq9zR31T+y1h9CnhtElBrXMwmSaEAuGIsPNCzmRWqEmrKKA5otQNlEe0E730dgjT Hp4ChZQbF0YxcnGmh2ZUCsNjT+iaN59fTeoiqVBmiRXtOvDHkw1/JAjUAmicMOkt +4Uk8AtC7LFwUd9sV8Mv8cJkEzU/kQVfJZjF1JOGHT9mNW3rTLlh7Dwy4tB+zwGF kdvp82XXr0zn8iyRW95XlGOxFlGGptI5Ddtqxzj3G0zaT2l3TK3NqB+8lm2VFwKi rW74UycmIobOzu2n+QaYadctaBNydPZ8veGU1Cv4ORHOXlrMLrRyW2jk9HJgI98T 870L1kuVRemF7wWyoqT0UZkx2zN30Z2NyjuglzSBZjl/8oENmfvs3p0kvxY5ETy6 MPKVKYAuAVvzIEdD5+PksO7QryTBtPHu4ahNxTsCzIZAHy41qFJ5nNT+6QOYs+6I qfPeI2f8xzUnm/tOi7HFiFeNbltYPiYsu76CVNl4H96N5nxbvwNr9LLTk4uhfYNk WJH/e/63bzUYl9bGwsLyqqKksO4hJI6o2wXC45IxfSwl4TaLuPplT/sMHscJDLPe 7+VrY51E6Jg4YoqG6LD0vkTODXyQq2+bTMdq8lLxtU65xewr+Hkgmiir+SZvIWKO AzQh3lBdonoLqRbbqVzq =uEBG -----END PGP SIGNATURE----- Changes: quassel (1:0.10.0-2.3+deb8u1) jessie-security; urgency=high * Fix CVE-2015-3427: SQL injection vulnerability in PostgreSQL backend. (Closes: #783926) - Add debian/patches/CVE-2015-3427.patch, cherry-picked from upstream. - The original issue was CVE-2013-4422 which had an incomplete fix. -- Felix Geyer <[email protected]> Sun, 10 May 2015 16:41:30 +0200