News for package dpkg

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 3.0 (native)
Source: dpkg
Binary: libdpkg-dev, dpkg, dpkg-dev, libdpkg-perl, dselect
Architecture: any all
Version: 1.17.25
Origin: debian
Maintainer: Dpkg Developers <[email protected]>
Uploaders: Guillem Jover <[email protected]>
Homepage: https://wiki.debian.org/Teams/Dpkg
Standards-Version: 3.9.6
Vcs-Browser: https://anonscm.debian.org/cgit/dpkg/dpkg.git
Vcs-Git: git://anonscm.debian.org/dpkg/dpkg.git
Build-Depends: debhelper (>= 7), pkg-config, flex, gettext (>= 0.18), po4a (>= 0.41), zlib1g-dev, libbz2-dev, liblzma-dev, libselinux1-dev (>= 1.28-4) [linux-any], libkvm-dev [kfreebsd-any], libncursesw5-dev, libtimedate-perl, libio-string-perl
Package-List:
 dpkg deb admin required arch=any
 dpkg-dev deb utils optional arch=all
 dselect deb admin optional arch=any
 libdpkg-dev deb libdevel optional arch=any
 libdpkg-perl deb perl optional arch=all
Checksums-Sha1:
 626c25979b9eb22bd504a08c150deea7ab6f4335 4407792 dpkg_1.17.25.tar.xz
Checksums-Sha256:
 07019d38ae98fb107c79dbb3690cfadff877f153b8c4970e3a30d2e59aa66baa 4407792 dpkg_1.17.25.tar.xz
Files:
 e48fcfdb2162e77d72c2a83432d537ca 4407792 dpkg_1.17.25.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=vvpK
-----END PGP SIGNATURE-----

Changes:
dpkg (1.17.25) unstable; urgency=medium

  [ Guillem Jover ]
  * Do not leak kvm descriptors in start-stop-daemon on GNU/kFreeBSD systems.
    Based on a patch by Jeff Epler <[email protected]>. Closes: #779467
  * Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
    only accept [\r\t ] as trailing whitespace, although RFC4880 does not
    clarify what whitespace really maps to, we should really match the GnuPG
    implementation anyway, as that's what we use to verify the signatures.
    Reported by Jann Horn <[email protected]>. Fixes CVE-2015-0840.
  * Use correct versions in Conflicts for removed packages. Closes: #776984
  * Use backports friendly versions in Breaks/Conflicts.
    Reported by Thorsten Glaser <[email protected]>.
  * Fix perl warning in dpkg-genchanges when parsing BY-HAND file entries.
    Regression introduced in dpkg 1.17.7. Closes: #781074

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #779953
  * Hungarian (Úr Balázs).

 -- Guillem Jover <[email protected]>  Thu, 09 Apr 2015 23:40:47 +0200