-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jul 2019 10:58:07 +0000
Source: patch
Binary: patch patch-dbgsym
Architecture: i386
Version: 2.7.6-3+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 patch      - Apply a diff file to an original
Closes: 932401 933140
Changes:
 patch (2.7.6-3+deb10u1) buster-security; urgency=high
 .
   * Fix CVE-2019-13636: mishandled following of symlinks (closes: #932401).
   * Fix CVE-2019-13638: shell command injection.
   * Fix CVE-2018-1000156 regression, temporary file leak on failed ed-style
     patches (closes: #933140).
Checksums-Sha1:
 8429017dbd9be5772abec20adb0bfe6d5466663f 232404 patch-dbgsym_2.7.6-3+deb10u1_i386.deb
 ea1299be0ecd10a164f68d998ed890828ce263e6 5278 patch_2.7.6-3+deb10u1_i386.buildinfo
 531ce277e633a44b06054c5a54aaff1a2deaa92e 139900 patch_2.7.6-3+deb10u1_i386.deb
Checksums-Sha256:
 ef226b410ba6de565f359c73af989962cc9f247244c5b50f54e1a23f7454c8eb 232404 patch-dbgsym_2.7.6-3+deb10u1_i386.deb
 a61e8f971396dbd0f53e25dd419fcb8c94bac0eabfee1a7bfc1fae9625a40b22 5278 patch_2.7.6-3+deb10u1_i386.buildinfo
 dffaae2f3cefb0ba7503d8001c0e573d29aaf4360884853db2563f61e6ebbe76 139900 patch_2.7.6-3+deb10u1_i386.deb
Files:
 986497a44542ff827be03c763bc73b7a 232404 debug optional patch-dbgsym_2.7.6-3+deb10u1_i386.deb
 62ecda7144bb3d6a34931d9d51a9b5b7 5278 vcs optional patch_2.7.6-3+deb10u1_i386.buildinfo
 ed6bcb91ed9f7a145507a368e8e6ebb1 139900 vcs optional patch_2.7.6-3+deb10u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Tla5
-----END PGP SIGNATURE-----