-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (native) Source: devscripts Binary: devscripts Architecture: any Version: 2.15.8 Maintainer: Devscripts Devel Team <[email protected]> Uploaders: James McCoy <[email protected]>, Martin Zobel-Helas <[email protected]>, Patrick Schoenfeld <[email protected]>, Ryan Niebur <[email protected]>, Benjamin Drung <[email protected]> Standards-Version: 3.9.6 Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/devscripts.git Vcs-Git: git://anonscm.debian.org/collab-maint/devscripts.git Testsuite: autopkgtest Build-Depends: bash-completion, debhelper (>= 9), docbook-xsl, dpkg-dev (>= 1.17.0), file, libdistro-info-perl, libfile-desktopentry-perl, libtimedate-perl, liburi-perl, libwww-perl, lsb-release, perl, pkg-config, po4a (>= 0.40), pylint, python3-all, python3-debian (>= 0.1.15), python3-magic, python3-setuptools, shunit2 (>= 2.1.6), unzip, wdiff, xsltproc, xz-utils, zip Package-List: devscripts deb devel optional arch=any Checksums-Sha1: ce555ac7e16a93c0e7e7fd918177b1dd1982e201 620224 devscripts_2.15.8.tar.xz Checksums-Sha256: 7d2df363f9a725096d281321e0c2a41e1613e645955c3956a78bd91715bc87ff 620224 devscripts_2.15.8.tar.xz Files: 38aa190b6978be31bfe4a15eefc54633 620224 devscripts_2.15.8.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJVvhZxXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ5MUJGQkY0RDY5NTZCRDVERjdCNzJEMjNE RkU2OTFBRTMzMUJBM0RCAAoJEN/mka4zG6PbvvIP/0UPW43ijj/0lXWOPokPW1jQ RPZ5A7TiKcMQq4ijhAHxNybSB8gBL0xhQ6U0zdM32/9ATha7UvTqDKMne9mHvv8E FU2pk5hnM+fh/V90QU5KAtZzLcLfQVqM0V4m1nunHeFrCTEr9WUxsXmTzayNnOoF ln/+ioWK6ZjtBSF1lpdKh9x2BFEyBMlvCM0AX4Sco023Fn3joeBSU3Tt6IOdWRKE 1Ky8BzAIz8zMh0zCDnesQMiu7xah5NIh4B1mKOxWbls/rP8gq8Yhp5MLE4d5Ve1n u0SXKsyjeATOTnBRRiam/HyN69USZxMbjxEbwDIaqqwVavOOFZeFwIpL/6ek1uj9 pCT3yYaDYPLWBZGtDlmwBt7Rq1Jb1HOFhRrQRPb9T4XeH4IRFp9ZdVc0yZUofyPn ohQMSjV0GP+N7M9mTvk/H1uabjmcd8szKjyF1Od47M/ygeC44+MZf1eMsty6bf0c +xjE//sDraYMYXKkmz5LuakV2K1+KUnHVjqj46Im15xxw2SK8FEOsmG2s/3RjIIt Z2fo9yjL0mcy+2zHqnKtoyv1La+lbvid4RSFYgiK1tu9Io7We8UzprvjkY9jthFl AA3gpTV7SwGJkVZsujgup3u1tryVagqPgshEI5oh58Q2bVkIW/xwnvQURPMhMdoE 0BmAkQn5mOdy3PFGbDNg =NmAl -----END PGP SIGNATURE----- Changes: devscripts (2.15.8) unstable; urgency=high * licensecheck: + Avoid argument injection which may cause file to overwrite a file through symlink indirection. (Closes: #794365, CVE-2015-5705) -- James McCoy <[email protected]> Sun, 02 Aug 2015 09:06:05 -0400