Accepted libarchive 3.4.3-2+deb11u2 (source) into oldstable-security

Mon, 11 Nov 2024 13:21:20 -0800 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 11 Nov 2024 21:44:16 +0200
Source: libarchive
Architecture: source
Version: 3.4.3-2+deb11u2
Distribution: bullseye-security
Urgency: medium
Maintainer: Peter Pentchev <[email protected]>
Changed-By: Adrian Bunk <[email protected]>
Changes:
 libarchive (3.4.3-2+deb11u2) bullseye-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2021-36976: RAR reader use-after-free
   * CVE-2022-26280: ZIP reader out-of-bounds-read
   * CVE-2022-36227: archive_write NULL dereference
   * CVE-2024-20696: RAR reader out-of-bounds write
Checksums-Sha1:
 cf49c80b13bf8f8ebc217c393b8e244eb41de19b 2543 libarchive_3.4.3-2+deb11u2.dsc
 53f1400ac71778d14615a66f89e04403548fae76 4811508 libarchive_3.4.3.orig.tar.xz
 b56d21a38824b2997fe0cb600df4c802b608377a 833 libarchive_3.4.3.orig.tar.xz.asc
 53432998c9be97c54be5a5bceb505ae0ac07e93a 34096 
libarchive_3.4.3-2+deb11u2.debian.tar.xz
Checksums-Sha256:
 c30eda83b4f3bb2078e5cb7b34f1cb9f7a3498da27773e1994ae5a1fe717a524 2543 
libarchive_3.4.3-2+deb11u2.dsc
 0bfc3fd40491768a88af8d9b86bf04a9e95b6d41a94f9292dbc0ec342288c05f 4811508 
libarchive_3.4.3.orig.tar.xz
 e43bdc701140383c9e4d90070a684026c05407c95b8fa26a71b20f19a704df89 833 
libarchive_3.4.3.orig.tar.xz.asc
 55450a7faf78dbe6675194af39122bf59e53c26e6714324dd9e391d7c3d22519 34096 
libarchive_3.4.3-2+deb11u2.debian.tar.xz
Files:
 7b872da0d48a83316d5a2900c9f5e608 2543 libs optional 
libarchive_3.4.3-2+deb11u2.dsc
 4b216ea3015ecf8ae555a2026f9a6b73 4811508 libs optional 
libarchive_3.4.3.orig.tar.xz
 74a851a5f2d12379fcd0205526805919 833 libs optional 
libarchive_3.4.3.orig.tar.xz.asc
 1c221ec087932210454f8ad740923ac4 34096 libs optional 
libarchive_3.4.3-2+deb11u2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=WTlZ
-----END PGP SIGNATURE-----

Attachment: pgpNcjjXD_D2G.pgp
Description: PGP signature

Reply via email to