-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 28 Jul 2011 14:22:31 +0100 Source: openarena Binary: openarena openarena-server Architecture: source amd64 Version: 0.8.5-5+squeeze1 Distribution: stable Urgency: medium Maintainer: Debian Games Team Changed-By: Simon McVittie Description: openarena - fast-paced 3D first-person shooter openarena-server - server and game logic for the game OpenArena Closes: 635733 Changes: openarena (0.8.5-5+squeeze1) stable; urgency=medium . * Apply upstream r2098 to fix arbitrary code execution by malicious QVM bytecode, which could be auto-downloaded from a malicious server if enabled. CVE-2011-2764 (Closes: #635733) Checksums-Sha1: 6324e0908b10ca4cadd0180c046e6ddd97c2881f 2099 openarena_0.8.5-5+squeeze1.dsc 79bb24858637b5edbe8c7f51d2c19721be191c0f 244882 openarena_0.8.5-5+squeeze1.debian.tar.gz cc33baf2ffe0638aaf92605b1ea7a824fe8ff5b0 928160 openarena_0.8.5-5+squeeze1_amd64.deb a89c63ebb580b4bf60559b0593ddd36ebd59a0c0 2764960 openarena-server_0.8.5-5+squeeze1_amd64.deb Checksums-Sha256: 65e774d64f6a4d35f1f39aed5f617eb95161dbb0991770c94b8681cd14db50b1 2099 openarena_0.8.5-5+squeeze1.dsc 90042a56561abe1b848ce35f1d72416c4efe05e421490f5e321ec4fbc919a66b 244882 openarena_0.8.5-5+squeeze1.debian.tar.gz e0b482b8d175a72affd0ad9e446fcc761c3ed2c8b538a8507fc6d68a1c6daf18 928160 openarena_0.8.5-5+squeeze1_amd64.deb 2b2f509cdd6087c8dd08711878c38d16e00f8088852e8583d389f6be58dc1273 2764960 openarena-server_0.8.5-5+squeeze1_amd64.deb Files: e994b70ef9fcfb312699d8d5207e045b 2099 games optional openarena_0.8.5-5+squeeze1.dsc 2ba30d14332f2b1c8a8b52ded26be2dc 244882 games optional openarena_0.8.5-5+squeeze1.debian.tar.gz a44dce91fea8d3966b65059ae6421c93 928160 games optional openarena_0.8.5-5+squeeze1_amd64.deb 767bd70893e485708f538cd1a6b2405e 2764960 games optional openarena-server_0.8.5-5+squeeze1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIVAwUBTjQT4k3o/ypjx8yQAQg5Xw//b0XH5Zlg20dMzZ6HvbJAPQcan7synixA LjtUqL4eVujVxx40ru8hSOU3ZdvKAznN7UkAmgXTLuqSWwpTmtdo2QxRlbHo6pTf LKr2re3kFOi+oFC62mjHLwjzd3STLNMcJtz6IkHo7Y/fHae94Lb/cJrTp2ajiQP4 bEGzzQyJzbyO5RLNtlgVQoFa9L5aNlntDO66kL+t6RE+xCKeZtCdfQjlct71clbt lxCXzRMzParAYFD7CzrxAlLZ9NVWIIzBjtnkS2SnRZWjvkoLi3j+Unfcugk5EfgX o4MBB1TK/rl/XQyWyxeKsqsJJgP6E1xjrstOpNaxVgGPwcDPWlLVzCN2ZrHeakf9 LjBf8/adOglTHJZBXBDFGXwdQQy6cXkcljxuIbUME88s0bVu8SoWlx8LUPj1/Gtb S48XPHm27JCYIXRYumRF0wuskybWTu5cDsaIvEU/QEjldSdg54ED3MS8qFJNcIGB y/Lf7Xtlzu0DcleoEWxYz95tl3J27tsAfVzs5SMnPqvsZk1xUD16lD+3Zntx4l1K YVR/JVShznnq2zyWAxF3SFXOHh6uSKVGXuihfxMkbG7G4GQDQ5YjNuiB7oqQA638 DPH7dt20Yj0iH52Qf2fnQZ6XIASomn4yCRKw46ytqoJQAx/tos7rGuxZ6xa6CpaK 1fBaI9i84g0= =NlUA -----END PGP SIGNATURE-----