-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 19 Jul 2011 22:21:04 +1000 Source: opie Binary: opie-client opie-server libopie-dev Architecture: s390 Version: 2.32.dfsg.1-0.2+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: s390 Build Daemon (zandonai) Changed-By: Steffen Joeris Description: libopie-dev - OPIE library development files. opie-client - OPIE programs for generating OTPs on client machines opie-server - OPIE programs for maintaining an OTP key file Closes: 631344 631345 Changes: opie (2.32.dfsg.1-0.2+squeeze1) stable-security; urgency=high . * Non-maintainer upload by the security team * Fix off-by-one and privilege escalation via missing check for setuid() (Closes: #631344, #631345) Fixes: CVE-2011-2489 CVE-2011-2490 Checksums-Sha1: 0dc8e8c8a8eac0b2142b3d1315cda021c0b9fe69 44802 opie-client_2.32.dfsg.1-0.2+squeeze1_s390.deb 07f86d030186a3744d9d6670a021ffacef0fef33 47228 opie-server_2.32.dfsg.1-0.2+squeeze1_s390.deb 864ec1068f7bcdb2c87d69de6e1f6739e30e5343 31930 libopie-dev_2.32.dfsg.1-0.2+squeeze1_s390.deb Checksums-Sha256: d79d740bdd1a86a749d3c10c2cbaeb6a0dbb0248c792374917748f187814de97 44802 opie-client_2.32.dfsg.1-0.2+squeeze1_s390.deb 0f034dfae77e8beda827803c41d58ea05736832ff5d11ca1641f4e96474c8069 47228 opie-server_2.32.dfsg.1-0.2+squeeze1_s390.deb b5c730b5e25385c97e7d808cc0a79a11bbd40dee716f7ff1425860b2fcab68e2 31930 libopie-dev_2.32.dfsg.1-0.2+squeeze1_s390.deb Files: 669884434ca94466209aa325f8d13dd4 44802 admin optional opie-client_2.32.dfsg.1-0.2+squeeze1_s390.deb 26e9976dd160f49f4b0ea4b811e1dcc8 47228 admin optional opie-server_2.32.dfsg.1-0.2+squeeze1_s390.deb c29efb5c84c14016e84bece15fcf0249 31930 devel optional libopie-dev_2.32.dfsg.1-0.2+squeeze1_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOJfSgAAoJEKQvgtyb2UyIei4P/02jQ5wVgD/3o/u14G+pw8E3 yxaPPh2zGAIpJa49aV1wnkiSZJMRca8kZsVu3zlQkNgxZKH5f8o8TZfidHcl7R0m Re0IbLqy7sRHAbAR9ovDP0Ndf0xFIzeGX9l+f9U1/ck603A3NUVvqzb0gm076uYR zPR93GgMjtzK+W/MA0qKLNXRdkXV4mcgAP02pLFNAUWa/tdPRxobkTUk3u8ZQHor d2fF67QYqBxwjflE4RGcAZKuPnYFo6WoKVT/nCDhnec97z3xaKJ/btCFZmwgMCLs 1LaUcoy6TUE67JSe+3ZMq7BEk+mB5x82oEyRbcDKr+8t+0ghjDmp4pS3dJlx9cJe St8MVRA6CkvIX3PApgGOxJp6ZJNsp0ipx0CjKVJ6MJFrKUenoNfRCATCneHZErdC r3mh4f46++eLykrWCNgzf3qxcW2kx+FoOAaHVC3z+QIGYq5XaAQT/VU66r6od6iB WFGo1vBEOAWCVxBa4EkH9c22+4Tu47sPaS9gNLXSX7sFtxKynU9fVMQY8OGUY64V C5TOAatd3MCkkWypp1elCx7orVL92Ne8EOIlkbUjX+5EhaE5r8JYmluwahc7+Zla dMMHR06/hktsBE55vNw09xlLSc3riaRU2nbY+FG4rhELbcjYW142KrbRo+RGXfNa ybMG9uIlbcIEpidPIGiw =/4cl -----END PGP SIGNATURE-----