-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jul 2019 10:58:06 +0000
Source: patch
Binary: patch
Architecture: source amd64
Version: 2.7.5-1+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 patch      - Apply a diff file to an original
Closes: 932401 933140
Changes:
 patch (2.7.5-1+deb9u2) stretch-security; urgency=high
 .
   * Fix CVE-2019-13636: mishandled following of symlinks (closes: #932401).
   * Fix CVE-2019-13638: shell command injection.
   * Fix CVE-2018-1000156 regression, temporary file leak on failed ed-style
     patches (closes: #933140).
Checksums-Sha1:
 780d06fb5b039ea0008c26bc6cf74f0b9ff3ba1f 1840 patch_2.7.5-1+deb9u2.dsc
 4a5a98c6bed0e59d4eb65f93753d5b3610b7dd04 13036 patch_2.7.5-1+deb9u2.debian.tar.xz
 f99e4ef2e9c893f124b1c0ce283f15b1bea8aaa6 169442 patch-dbgsym_2.7.5-1+deb9u2_amd64.deb
 96660f89c43c1078d3c3686cc36c27257204295b 6353 patch_2.7.5-1+deb9u2_amd64.buildinfo
 cc171370eeb476c078548f7cea7c08d417ebaff4 111794 patch_2.7.5-1+deb9u2_amd64.deb
Checksums-Sha256:
 3e6b3452b6a658b5762b198a94f1ac5af6bb687f90e5749a7f5af12364ffa269 1840 patch_2.7.5-1+deb9u2.dsc
 c094ca6eabeb6c7fe3ea964bd242a2f018c5e2ce5b82cc4e977b37e214109c6e 13036 patch_2.7.5-1+deb9u2.debian.tar.xz
 4f3c47adbee6e2f0d9c4c5f3eb2ccc9218be7ea20c4a9989e7758293e6a2d28b 169442 patch-dbgsym_2.7.5-1+deb9u2_amd64.deb
 4c5aeb7c9c8d0d1a33a861ef9a17242861d1c290ca0750691ec41723d7c3f7b2 6353 patch_2.7.5-1+deb9u2_amd64.buildinfo
 62d885ef16e7a39813ba1736d6e8100d2d4e4d8334f170cce060683733a0be26 111794 patch_2.7.5-1+deb9u2_amd64.deb
Files:
 7e2af2d4fa2b8cce890ef6c264743cad 1840 vcs standard patch_2.7.5-1+deb9u2.dsc
 c0e5dff4659705a0317a88541d7d3365 13036 vcs standard patch_2.7.5-1+deb9u2.debian.tar.xz
 933bf2b40d706001f9e6eba68b34bc42 169442 debug extra patch-dbgsym_2.7.5-1+deb9u2_amd64.deb
 ccf2214769b348d4c4fd5369ebbe2445 6353 vcs standard patch_2.7.5-1+deb9u2_amd64.buildinfo
 26fcb68f4e81fea87d664dc95fef7b0e 111794 vcs standard patch_2.7.5-1+deb9u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=iQw0
-----END PGP SIGNATURE-----