News for package cpio

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 3.0 (quilt)
Source: cpio
Binary: cpio, cpio-win32
Architecture: any all
Version: 2.11+dfsg-4.1
Maintainer: Anibal Monsalve Salazar <[email protected]>
Uploaders: Ruben Molina <[email protected]>
Homepage: http://www.gnu.org/software/cpio/
Standards-Version: 3.9.5
Build-Depends: texinfo, gettext, autotools-dev
Build-Depends-Indep: mingw-w64
Package-List:
 cpio deb utils important arch=any
 cpio-win32 deb utils extra arch=all
Checksums-Sha1:
 db17d80369acf691611a38979f42f31e47ee6fac 802940 cpio_2.11+dfsg.orig.tar.xz
 6c0dd7b033bc9f4e22918ff329558572f8c30a58 19076 cpio_2.11+dfsg-4.1.debian.tar.xz
Checksums-Sha256:
 f3208df43692895e1ff84cb7625c6cc27b431c9a321fe414faed402b70660cd0 802940 cpio_2.11+dfsg.orig.tar.xz
 12018c408e4b42c437b11cf77828d8ecfb381c6862349567abc26a1da165dd54 19076 cpio_2.11+dfsg-4.1.debian.tar.xz
Files:
 54d2f3b3561c3a1ca2c192e94f00bc38 802940 cpio_2.11+dfsg.orig.tar.xz
 04a8fe34d792c08d590e2ff03199be87 19076 cpio_2.11+dfsg-4.1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ygRJ
-----END PGP SIGNATURE-----

Changes:
cpio (2.11+dfsg-4.1) unstable; urgency=medium

  * Apply patch by Vitezslav Cizek of SuSE to fix CVE-2015-1197.
    Upstream is dormant or no longer existing. To restore the old
    behaviour use --extract-over-symlinks (Closes: #774669)
    This issue has been discovered by Alexander Cherepanov.

 -- Moritz Muehlenhoff <[email protected]>  Thu, 05 Mar 2015 11:44:25 +0100