-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (quilt) Source: libevent Binary: libevent-dev, libevent-dbg, libevent-2.0-5, libevent-core-2.0-5, libevent-extra-2.0-5, libevent-pthreads-2.0-5, libevent-openssl-2.0-5 Architecture: any Version: 2.0.19-stable-3+deb7u1 Maintainer: Anibal Monsalve Salazar <[email protected]> Uploaders: Leo Costela <[email protected]> Homepage: http://libevent.org/ Standards-Version: 3.9.3 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=collab-maint/libevent.git Vcs-Git: git://git.debian.org/git/collab-maint/libevent.git Build-Depends: dpkg-dev (>= 1.16.1~), debhelper (>= 9), autotools-dev, libssl-dev Package-List: libevent-2.0-5 deb libs standard libevent-core-2.0-5 deb libs optional libevent-dbg deb debug extra libevent-dev deb libdevel optional libevent-extra-2.0-5 deb libs optional libevent-openssl-2.0-5 deb libs optional libevent-pthreads-2.0-5 deb libs optional Checksums-Sha1: 26a4c98592e46c066797f2bdb2ca605e8996a811 684062 libevent_2.0.19-stable.orig.tar.bz2 a1d2277316a0ba8d211f0894c91b9df2bb3aa88a 10540 libevent_2.0.19-stable-3+deb7u1.debian.tar.xz Checksums-Sha256: f111b460429289e958cd5f3bb75d06abd920d30ad733ff00a79f5864a7ca62e9 684062 libevent_2.0.19-stable.orig.tar.bz2 c340a40b32730abd4506450fca6ca1929387034c814ee503a502592f27f87ebf 10540 libevent_2.0.19-stable-3+deb7u1.debian.tar.xz Files: b0ba3762c4006e91ff5de70166d10216 684062 libevent_2.0.19-stable.orig.tar.bz2 2edee9d1f159dac74ece4b174859279f 10540 libevent_2.0.19-stable-3+deb7u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJUncOyAAoJEAVMuPMTQ89EwAMQAIZs6SIYbK7MArXWG7VmccDm vwtCHn5+lhB8jemKQYQko9A+cIVMiWf7rpusxNg3vwG87VUxa1xdZwpL7ORSqS9o dk5QGfwlS3IyJM33Y5PcuicyNLRK89V4UjnyhXet//VDjlFy2rBpVdHyyZlmjp1V KIp2H9foIChctmXEd9DKjsrBw56HXEN6WZuUcobauuAQG+xary2Tb74JHrXkedaT e9ke6KvDqqnfkn5vb+sGsV+O4ecyImBwoyDZQt2n9RcHA1yAqVIvSFnfcTpSZD6V Y6bnL0UjsHHWVdfAsmactP4zzQ9QP207ImHjtCN0U9oy4TJh8Fcru7ObHv/lTPQS 5kQB62+P7ss3gwBl64kVojg9SxkdXm5wcgIu5NwvGDSMuSNh3jgKLoIrZKYSjl9m lbcCEZJgvWgJpvhqafkITirEryXV2wQ/Njhd0kB29U8ANbfok9jfp0Wt0h9YxJaW AzfOp/Yw2uzm0t+2FNcpkxnh7taKQzgVDRFnxfmjpyxE2kTt2ivtRZ+s2ttF1UEm yknKH46rV0gMQaKahyQ4WYpA8RcQfqoBDUJHqnUGsQ2FY/X9IdfoascG1f8KDLlc iv9hN7+Q0vTvJVsS765pfpzZxr2OgnJj1wpWL2tiKomwLwnPqbqCzPg1Er2VhTkK 2uJL/didF7R90DcM3431 =/DJV -----END PGP SIGNATURE----- Changes: libevent (2.0.19-stable-3+deb7u1) wheezy-security; urgency=high * Non-maintainer upload by the Security Team. * Add CVE-2014-6272.patch patch. CVE-2014-6272: A flaw in the Libevent evbuffer API leaves programs using this API open to possible heap overflows. -- Salvatore Bonaccorso <[email protected]> Tue, 23 Dec 2014 10:30:49 +0100
