-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: fuseiso Binary: fuseiso Architecture: any Version: 20070708-3.2 Maintainer: David Paleino <[email protected]> Homepage: http://fuse.sourceforge.net/wiki/index.php/FuseIso Standards-Version: 3.8.4 Vcs-Browser: http://git.debian.org/?p=collab-maint/fuseiso.git Vcs-Git: git://git.debian.org/git/collab-maint/fuseiso.git Build-Depends: debhelper (>= 7), autotools-dev, libfuse-dev, zlib1g-dev, libglib2.0-dev Package-List: fuseiso deb admin optional arch=any Checksums-Sha1: 4b3069f535af53477172359eaaab90e5b827f8e9 339470 fuseiso_20070708.orig.tar.gz 51551f323c579637dbc7c5cb01bb20b5e794fd0f 5028 fuseiso_20070708-3.2.debian.tar.xz Checksums-Sha256: 9bc183a99f0025d01f30ac3f3622b2602b0ad58dfb5d3acce9063d144bf77193 339470 fuseiso_20070708.orig.tar.gz 8f26cf5994d59a9c388b758c6793551fb6008165c8169971c1ff6a60c7b93e96 5028 fuseiso_20070708-3.2.debian.tar.xz Files: 30a0e7a3cf577664001e471ba12b6fb4 339470 fuseiso_20070708.orig.tar.gz 4d4837edbd0e177a55d4a1df6fe8c91c 5028 fuseiso_20070708-3.2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWDPyXAAoJEJr0azAldxsxuNgP/j9Hqs89+CjZyFWTGTrNg9pX wFCe6i4rKbvhyPcS9KjH3S9oAiBPR2q2ZdrwYnpuG/Uu1+sCz7U627lKYsJyWxwk oULFa+QQz9yvsC033Z91RScd4T27XiN7hgUrJAA+IIwtAqcSTgNH0CEnI3d2ZZnl rPWfY011MPaKYKn4AJhtgBVGhyyn+QVtSQVPs/3vs8pgRFpeY2RllCvPUisvSf5m CX0PjjhioFZlTAddSX1HcqCLOWex4H9y6Z2p+NnwiEe4B4zjuCIXVUKVOB56q4oi WkQAesb0jd442aLjKKPSHKYfJDrvC/3qBAsU6IqsFIS7yl5JgKJpxvpOtfyghMgn nEP62MICTmDEqRjMGcFj0rsH8b4KZj8HRKTY6ZDdOEiUe8G0hmCA9zBA+oSmeSXm faRz3k7ztT1Z4yDnGrkqcb7kMwxqAnzBB5QTaMQ9N4gj8qEQIlhy+B69ShEmKpoV 3bxiddpY0tzOj0dVJqxTL3P6tSsJeWSPfGwnRqaterhahu3IfV+cz1IsKnqJ0Yn7 0Y9iagLpyzRHJ7R/Qpv28HVwMOOyNJMS4Hg2qrU/BvVzFM3ctjqdC7idu0Me4c4w /PN7Kgi6uM0uXU1E6v6+6v8GEGeT2V8reXR+i8KYIoWMb9IDlrzlGfE+PajxYXsq ECF/DZq3d736AfsXRCa6 =eapS -----END PGP SIGNATURE----- Changes: fuseiso (20070708-3.2) unstable; urgency=medium * Non-maintainer upload. * debian/patches (Closes: #779047): + Add 02-prevent-buffer-overflow.patch. Prevent stack-based buffer overflow when concatenating strings to an absolute path name. Prevention is done by checking that the result will stay under the maximum path length as given by the platforms PATH_MAX constant. + Add 03-prevent-integer-overflow.patch. Prevent integer overflow in ZISO code. Bail out if a ZF block size > 2^17 is to be read. -- Mike Gabriel <[email protected]> Thu, 01 Oct 2015 11:27:12 +0200