-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 Nov 2024 13:30:44 +0100 Source: libarchive Binary: libarchive-dev libarchive-tools libarchive-tools-dbgsym libarchive13 libarchive13-dbgsym Architecture: amd64 Version: 3.6.2-1+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: libarchive-dev - Multi-format archive and compression library (development files) libarchive-tools - FreeBSD implementations of 'tar' and 'cpio' and other archive too libarchive13 - Multi-format archive and compression library (shared library) Closes: 1086155 Changes: libarchive (3.6.2-1+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * rar4 reader: protect copy_from_lzss_window_to_unp() (CVE-2024-20696) (Closes: #1086155) Checksums-Sha1: 7a12b40bcc9a7311a2f505b793372f6f74cd06f0 560564 libarchive-dev_3.6.2-1+deb12u2_amd64.deb 66fcfce24ad90717c76ff332a4168a515c669f46 95976 libarchive-tools-dbgsym_3.6.2-1+deb12u2_amd64.deb b7534a37c37c51a20ad3a6e3be2ae2e8446e878a 73960 libarchive-tools_3.6.2-1+deb12u2_amd64.deb a944f7ba08afd5bde596f45f93e234fca9995db1 1057900 libarchive13-dbgsym_3.6.2-1+deb12u2_amd64.deb 03d3219e0b4fcc82524048898bf78e75648bb9ae 343136 libarchive13_3.6.2-1+deb12u2_amd64.deb 9eb5b7546dd1b3a7503c889c622482f5eba8ae4e 7772 libarchive_3.6.2-1+deb12u2_amd64-buildd.buildinfo Checksums-Sha256: b07bf13c16a55da61ac3b782ff951e1e81ff76aaa12a1a7b8c11b66109659249 560564 libarchive-dev_3.6.2-1+deb12u2_amd64.deb ea963d3b1ae5e318100563d36987a762211706a0d82ae0c81dd2279df89ad2e5 95976 libarchive-tools-dbgsym_3.6.2-1+deb12u2_amd64.deb 4bf24447dc3194ad5800c7a4ed17ee5dd30b0acbca0ad98e5f4633456d53caf0 73960 libarchive-tools_3.6.2-1+deb12u2_amd64.deb 9c58e58ba663516803cb8d4e9884b0c147a735ab9ba54a733d6cd77feb6a90c2 1057900 libarchive13-dbgsym_3.6.2-1+deb12u2_amd64.deb 88eb62873870ebb9bf046dcb561589c2168599cb2dd4ce5cc715c03d11bec688 343136 libarchive13_3.6.2-1+deb12u2_amd64.deb bbe633708339458b10b5c8cfbe634eca305b777316a7a10b331767524175b36e 7772 libarchive_3.6.2-1+deb12u2_amd64-buildd.buildinfo Files: 86d6f93f63e9cd7687e318183d7dd089 560564 libdevel optional libarchive-dev_3.6.2-1+deb12u2_amd64.deb 3ab1f117ac49ee30df66480d6a02aff7 95976 debug optional libarchive-tools-dbgsym_3.6.2-1+deb12u2_amd64.deb 7fa6e88cb9b0348bacd39d4f74424cda 73960 utils optional libarchive-tools_3.6.2-1+deb12u2_amd64.deb fd5316f1081a33a5ddcce657d35c3993 1057900 debug optional libarchive13-dbgsym_3.6.2-1+deb12u2_amd64.deb 4a937740d7972046b039f6915b076a25 343136 libs optional libarchive13_3.6.2-1+deb12u2_amd64.deb 843606ece6ef44d4e598d80fc5bd2941 7772 libs optional libarchive_3.6.2-1+deb12u2_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGBeuno8wiDXCewDuqqLQG5ksqMMFAmcnc9YACgkQqqLQG5ks qMN0pBAAyBOqsKIRpw44dGzftyBA2bq7If0rt6E4oqCMogpS8YLZMyk+ZKwV8cDU yJ7TcOebNwRsenSIjFO1f/2THOLkkyxuXGQExxlI83PxHncvQLZfkOz5Ps7Nv7Vu XgfDgVhO7d5pGerIzI22uwzErUEsfR6KklZh/yo6HCaha94beo0RM66616bn7e2N 5fX57ITku1J3CIczNYZ2+iJOvZahSMANGCHfXqLgGrwETCEJqdECjLAPB6FFwhXs CK4T2PSMKMFcj5wSbFFvj1RDMgx0zsQx/uZ/OX7UZcgNEywJ/0o2HI3W63CqupOz i1CtmEXiAZjNijRdF2mMbIgCJY77XDWt25GRUjxxsrph2m2Kxpkis3bGkKSnGl4O luUfDBkjbmq9jWiyXO0j6iERCMUnAvwsi+bGPS6+NMmQ1i7rOG2ckOo3JEgV5uv/ ihqgC46MQnuVvdn1MG6wN9+GGRlyR2jUHOOmfwbjG/ehW05fcLc3j7KPvgXHPNh/ YYhyVeGFJy1QfqBIwwQ/QzUVCLVCJA+uEY28OS7HJk19UgST+YuIHCV22/t1sres Jp55YKkGsSuGnrD2Fd0J414mEjZ9V6Fle8kQVTxdk9WWUCA3l7ZXY3hHfOs3EkAn YystiJlFfaCIgBKQqALBVA38ep9pD3OcB+GaZWooVmKyW+ZCLDA= =T88m -----END PGP SIGNATURE-----