-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 Nov 2024 13:30:44 +0100 Source: libarchive Architecture: source Version: 3.6.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Peter Pentchev Changed-By: Salvatore Bonaccorso Closes: 1086155 Changes: libarchive (3.6.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * rar4 reader: protect copy_from_lzss_window_to_unp() (CVE-2024-20696) (Closes: #1086155) Checksums-Sha1: f5d4408921d002967098c93516c32a0620cd9dd8 2695 libarchive_3.6.2-1+deb12u2.dsc bab405158bdc4b5b3ca2e88ed3a0e0a31bf86bfa 27880 libarchive_3.6.2-1+deb12u2.debian.tar.xz Checksums-Sha256: 24ae32f38f1c38e9e858b8c0d6fc66ac31c9eb1ac55145cfb5fc6fd42c364703 2695 libarchive_3.6.2-1+deb12u2.dsc a7538a38ad85ee30600ea556ee5db85cef85d999a0edae3e33f116852b983c6b 27880 libarchive_3.6.2-1+deb12u2.debian.tar.xz Files: 709cc85eedc473be7d364e1f8c5ed331 2695 libs optional libarchive_3.6.2-1+deb12u2.dsc 2674f81fac4cc2d24b5bea8444f85311 27880 libs optional libarchive_3.6.2-1+deb12u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmcnb9ZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ezo0QAIff14aEgjrOP1tr7FfFEMFLE/Fvn1SU psTHMJiUS0HBk/lprzWiIsMXpmUWOKrh6iu1uX5UIWX0khjV4lAv7ixM8G0DNxLL mgPOGOU/ChEZRq8EbLJPQ4o3ZmUIg0/RIk9ff+DplVInYnqL5FKOTiQ5QBHK3ZxP bkbuxZYrq2pderNWICVzndF7KneuAB8+iBSbLixgYF6I2tTu1g2j2co9cVL9ijXX gKti4ErQcplnqktb4KRv0ZF5D8aa9umWhar52P/B2B+926dIFQoPbMNLixXvgY+c z6LefbqB+9JFn9Tfn4776UEkD6CG3lGTEBRpNbWWWTcPVzuOS9VTawoTZK5LJpmD GU/Yq5TgMmkG0QAMTqXzLb/BsS20dRMKCMWbr5QgoSdbzIi7+/6pQDEPVscsfCVj xxLTuEbeCTVoZK8kUTCN3b+m4PYW1hZOUe1+rCPAny1ftXlX+lw/HRpdPihr0HCz J3mY4wv296T06SkHmo2GgBrapPUkyF997Fp0Cs3fUy0j22hDHe2+378MhoqaSaST uX3uEL90wLDybfEzvCmtgcAakaFG0/p04nVxbjn5QWatuN9HWsbEQablIJyZWytH jcDBSboA76F7YOkc1Q53yji8Ia1+dHGMBI6l04FPBteuFvHL/u+aKeTKlVMeRE/A r3d/kTnxx5WT =889+ -----END PGP SIGNATURE-----