-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 19 Jul 2011 22:21:04 +1000 Source: opie Binary: opie-client opie-server libopie-dev Architecture: powerpc Version: 2.32.dfsg.1-0.2+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: powerpc Build Daemon (porpora) Changed-By: Steffen Joeris Description: libopie-dev - OPIE library development files. opie-client - OPIE programs for generating OTPs on client machines opie-server - OPIE programs for maintaining an OTP key file Closes: 631344 631345 Changes: opie (2.32.dfsg.1-0.2+squeeze1) stable-security; urgency=high . * Non-maintainer upload by the security team * Fix off-by-one and privilege escalation via missing check for setuid() (Closes: #631344, #631345) Fixes: CVE-2011-2489 CVE-2011-2490 Checksums-Sha1: dea2d975f6953e99078a93d371c0cabcc3685e9c 43704 opie-client_2.32.dfsg.1-0.2+squeeze1_powerpc.deb 569da7c496c641cfbb63993d81840bc9d730b614 45434 opie-server_2.32.dfsg.1-0.2+squeeze1_powerpc.deb e9e06709897b7665bbbc0e03d605208853cd8056 30682 libopie-dev_2.32.dfsg.1-0.2+squeeze1_powerpc.deb Checksums-Sha256: 683834be5ae397fe1d0fe278fa507c99b6f3d6536f383fed3a42879da1efc2cb 43704 opie-client_2.32.dfsg.1-0.2+squeeze1_powerpc.deb 7cdaf40d17a456e701405c3ad3fff02a41d2103bf574b4b4d0b2435944eac38d 45434 opie-server_2.32.dfsg.1-0.2+squeeze1_powerpc.deb 7839d3bbfcf6ad350151ad0f0d4ffef5ec144c6d3fdf44bec6d10e7281291c3a 30682 libopie-dev_2.32.dfsg.1-0.2+squeeze1_powerpc.deb Files: 4efdf48644f2382ee5c00941aeb48a3c 43704 admin optional opie-client_2.32.dfsg.1-0.2+squeeze1_powerpc.deb 2245caedceb5b611b9d95781f8b1362b 45434 admin optional opie-server_2.32.dfsg.1-0.2+squeeze1_powerpc.deb 3b167418f1d6df776466f4ed43a54fd4 30682 devel optional libopie-dev_2.32.dfsg.1-0.2+squeeze1_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJOJfRkAAoJEAq/4UjN+gqJoYcP/iozDrYv8C2uIsYSGKtdJEr/ cGyeYjMYU5/o7zCoZpKxvacblOV0l9d6xEVnQZmp54mh92O+DhJkPtmXFgBCag1Y yySMltdQB3KkMb6fxZJ8pCci246EOsddzqaDl9hJbKmPEuPvElR9EncJHyOPmkdw Z5xLIbzbwQu6BxrzJzqf7g3yHWpEyLwmDT5yLfwzB0lHpKoBwwaZ5iMWsqTO054v fo1QKzPz0+wSB9SOex2GsYWRlgGCImXKualfScT0JdsUmm6ENilcKXftmjcu2WPY 7irssahMvxQxu/Fqp4wWo4owqICiM+ZCuhgcRm096HXmteJuo/cgs+28kiCRmLut 0fhe9XNNHewsOZtb4s96lV9/T9hU108FqLtJVKe73bFcbZiuW/hUVFrFb1KSLCKd O2Hq1NVy12BWdso7adxWqj0WeBSwSV6n5jk8mpqTuu475FWNjiEI7SfTT5f1lZ94 AyiH1D/vPovtVZKAtmhmV6Vax2EnwTgRrjiG7z3n3DGh04v3PRW1dB4xbbm2hi+P oQ3wQhDZUJBXW9fNDjF7AD+o6COt8Xy+de60pFFioZovUPOcmUmtw6A8skN9ybAh Xw3Ld62KhQYw+kbfJXNoDBEv601D2cCiQ4YFIXxu05djJeNiEvs/R+ziC1C+1sE1 1kF3T9XLo6MvdHQxA0hK =pL4G -----END PGP SIGNATURE-----