Just released, including security updates. Updates in 2 source package(s), 4 binary package(s):
Source tzdata, binaries: tzdata:amd64 tzdata:arm64 tzdata (2018c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following past and future timestamps: - São Tomé and Príncipe switched from +00 to +01 on 2018-01-01 at 01:00. - Southern Brazil will begin DST on 2018-11-04 instead of 2018-10-21. * debian/control: Update Vcs-Git and Vcs-Browser fields following the move to Salsa. Source libtasn1-6, binaries: libtasn1-6:amd64 libtasn1-6:arm64 libtasn1-6 (4.10-1.1+deb9u1) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * _asn1_check_identifier: safer access to values read (CVE-2017-10790) (Closes: #867398) * _asn1_decode_simple_ber: restrict the levels of recursion to 3 (CVE-2018-6003) https://cloud.debian.org/images/openstack/current-9/ -- Steve McIntyre, Cambridge, UK. st...@einval.com "C++ ate my sanity" -- Jon Rabone
signature.asc
Description: PGP signature