-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 May 2019 12:55:42 +0200 Source: signing-party Binary: signing-party Architecture: amd64 Version: 2.5-1+deb9u1 Distribution: stretch Urgency: medium Maintainer: amd64 Build Daemon (binet) Changed-By: Guilhem Moulin Description: signing-party - Various OpenPGP related tools Closes: 928256 Changes: signing-party (2.5-1+deb9u1) stretch; urgency=medium . * Backport security fix for CVE-2019-11627: unsafe shell call enabling shell injection via a User ID. Use Perl's (core) module Encode.pm instead of shelling out to `iconv`. (Closes: #928256.) Checksums-Sha1: 0d6233ec03d30e8f2817e949471eaa1b8a0870ba 45876 signing-party-dbgsym_2.5-1+deb9u1_amd64.deb 5f7540f6099b5f537ab4dbb8d7a5a623a7ac3d93 6593 signing-party_2.5-1+deb9u1_amd64.buildinfo 13adf5caa03b27db401e6d4a20cca7baadd48a91 172912 signing-party_2.5-1+deb9u1_amd64.deb Checksums-Sha256: d15378f149e4293427b1b530b59feb346d192fc3420a02dbb72f3204be8d9753 45876 signing-party-dbgsym_2.5-1+deb9u1_amd64.deb f9cd27f8ff063bb16bea52bd9637f5dbbac3852d6725f010153132c22791c74e 6593 signing-party_2.5-1+deb9u1_amd64.buildinfo 33e6533a34de277b34be247b9500142369bb6e1b902c9c722779ed29b147b9fd 172912 signing-party_2.5-1+deb9u1_amd64.deb Files: 0ed77f4b206365702af68edb5fd071d6 45876 debug extra signing-party-dbgsym_2.5-1+deb9u1_amd64.deb d98121449a9c7f4806709e18d7afcfd8 6593 misc extra signing-party_2.5-1+deb9u1_amd64.buildinfo 7a25782c8b3cae7643d95e0e2ccfec4e 172912 misc extra signing-party_2.5-1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHH/JmdSykanqZdkX2+6UAFDBS9EFAlz8IaAACgkQ2+6UAFDB S9HY0BAAiDMQHPb3azlnKE+D+s0AHKUeSyNRTUYc4AVptxKQjKjzCuUZ/esyeZ6A usjkmrJvoqh9XdiYkN/n0zOA4SAOMiGfiFCiUfszqQjZ/z1oq5maQYZp7TJsCpH5 /l6+mdzIlVrKHb35iutu1jEsxkQYn+hZoSM380MLAwhD+0wPqBvco3kLUiL0erkU auded8HdijYDzStucIpEJGh0e3abFvxs5cVHMFHDwShLpE95SvFFwQGEvYtjJgC1 L6JqD5fErzQeKwyleb5fNnU9qJ6cd6RQ3n/OB3P7DEINchLLErDvGEuWqICM+wpA A0pMjhaN+Kyhzn2vKav8IAy0aXeTCZp40UpEo/25UeyWSjbNNyQMxNhdvnJVhIV5 uCm0CIZ0dXn5Ay7oAfK5EzmuGVvkB5ZeBIdPHogVKbIGB9FKqloB7xgAUYkU0Kb+ 00OGXL6KXUqoux8iJIHsv0e9OeTsfNLkwNyqDxDnT6OSJ7FldMnf9mMsiORdm4mo BHdzQTK1huvGi2LjvVXmZlQW4NYEPrrVyc5+PQsIGqwCCupDQlVEcu1ZsdMf3181 cn/9OTOGQ6a0THA8AjSnEZUW8CC3zGGxIkWxsrj9ZGQHinhkKJNhd9zMYIhP7vej 1VnW0gLph01qEzHmB/XK9UV9hEcBPRChy0AAQQhTNZvIWbVtpas= =wKqh -----END PGP SIGNATURE-----