-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jul 2019 10:58:06 +0000
Source: patch
Binary: patch
Architecture: i386
Version: 2.7.5-1+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 patch      - Apply a diff file to an original
Closes: 932401 933140
Changes:
 patch (2.7.5-1+deb9u2) stretch-security; urgency=high
 .
   * Fix CVE-2019-13636: mishandled following of symlinks (closes: #932401).
   * Fix CVE-2019-13638: shell command injection.
   * Fix CVE-2018-1000156 regression, temporary file leak on failed ed-style
     patches (closes: #933140).
Checksums-Sha1:
 2c9c8e5f309fa2ff521c6c8231ce7bbd455eec69 158854 patch-dbgsym_2.7.5-1+deb9u2_i386.deb
 5ec72aec2a5f1f83c1db1bb80fd1c6c33c6d17b2 5733 patch_2.7.5-1+deb9u2_i386.buildinfo
 43bd48881fe9c08885458dbca5e8edb1b9dab832 124252 patch_2.7.5-1+deb9u2_i386.deb
Checksums-Sha256:
 04addc45fe757c1c12782174216fd88e49fb5b3d629a5975e63255f98553b4c6 158854 patch-dbgsym_2.7.5-1+deb9u2_i386.deb
 6e5c328a3e6df318c36c383a03ffb17931a54be1c80ee49e402f413b5b36ce7b 5733 patch_2.7.5-1+deb9u2_i386.buildinfo
 29ad53de50394aac491b77fa7578d30db532f72399ab8a2ac1ac6debc96edf78 124252 patch_2.7.5-1+deb9u2_i386.deb
Files:
 898515e11484fb2e69ec9400d3300c94 158854 debug extra patch-dbgsym_2.7.5-1+deb9u2_i386.deb
 dc4db16783a0d700f51afd12da03a002 5733 vcs standard patch_2.7.5-1+deb9u2_i386.buildinfo
 e2bb515a1655fb30595648f88322fe50 124252 vcs standard patch_2.7.5-1+deb9u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=wKpa
-----END PGP SIGNATURE-----