-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 25 Aug 2021 12:09:55 +0000 Source: sabnzbdplus Architecture: source Version: 2.3.6+dfsg-1+deb10u2 Distribution: buster Urgency: medium Maintainer: JCF Ploemen (jcfp) Changed-By: Jeroen Ploemen Changes: sabnzbdplus (2.3.6+dfsg-1+deb10u2) buster; urgency=medium . * Backport upstream security fix to prevent a directory escape in the renamer function via malicious par2 files. (CVE-2021-29488) Checksums-Sha1: c72e36894aab12123f9e70118f6ca224e942beb5 2148 sabnzbdplus_2.3.6+dfsg-1+deb10u2.dsc 2c940247c4d37e47f783659c9d6abdf4a06aa775 36400 sabnzbdplus_2.3.6+dfsg-1+deb10u2.debian.tar.xz 88e6197d27e4a90698076225756523ef492982d4 15065 sabnzbdplus_2.3.6+dfsg-1+deb10u2_source.buildinfo Checksums-Sha256: 73d9b718aaac33d880967f083c9156678c9e322479b6e01c98315d2e93e4ecbb 2148 sabnzbdplus_2.3.6+dfsg-1+deb10u2.dsc 41568b9b836b2d3678c2eb80f6499d3797131b8e00395ca2bc48ec058ce3b8cf 36400 sabnzbdplus_2.3.6+dfsg-1+deb10u2.debian.tar.xz 371fe1242135f606b8d0d588e11ad6676bdaf0c2e019163d7864c7a54cc1ff95 15065 sabnzbdplus_2.3.6+dfsg-1+deb10u2_source.buildinfo Files: 0a1b9a0ca619fd29924c65afbd717495 2148 contrib/net optional sabnzbdplus_2.3.6+dfsg-1+deb10u2.dsc 23c9c024456ce9f918a67eca3b93b691 36400 contrib/net optional sabnzbdplus_2.3.6+dfsg-1+deb10u2.debian.tar.xz 93f15dcf795fd7e23fdb6b5eb2ab097a 15065 contrib/net optional sabnzbdplus_2.3.6+dfsg-1+deb10u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEEd8lhnEnWos3N8v+qQoMEoXSNzHoFAmFHXYoQHGpjZnBAZGVi aWFuLm9yZwAKCRBCgwShdI3MetUeD/oCLwU6wIid1ZECGx5nq8qnG1HNlCLopYrp rKfwrHuldDOhIHnkwACV2d3L5SLmFQiOZReS55fxvn29tEPTcqYFNchNifS+E9Jj WoFcmycyjcIBXm3/zmmbXE7VFHB588faS02mphuyoe8H7y3m6rToPd4m2w5tuU6V TLcFa+uPLb0/DdhTxFQhwHXIMEr+6m6jla2ee5P/KUEbMgbr1o9H3tbBGjtW7MhD jaNSWXd4wHgHHB8KlRFI2owU2pnPuS39+VO7I+IwTJv6f0H8gYSeBx8EqfAmVi6w 9iq0q2cLxNMhzabxoCqRwBLzCTJhhQXn2n6OdLill9A8bWpR7BX0Kfm5siemujM5 sdqaf4I24utugbGsOFWVG3WdBsgdT3dNqe3AfI295LtYBK2DkK8XPo0BKH1nXEdr hetkRWXp1dUwhuBJsgG18ZWOurESoqd5rBUqn0g0vhueQL/ZnQSdVQHlOI3Hb1pt UB9BDQyZFbn4Ly32qGvF6ouEREUGxhYHW+XExfCMScnk61hckVnMr3utrKBKJWH8 E1GJ5ljbLh14/ZHL6x2f6CzixflLLmBbP2+nHmyc3CfXzv+SSx9yh4IN+x1AWM9S 61tYC7IRJLZJw/M+uUKf+nnzE1uhHKg1akhkjRrdbAwzyycP4MFyGoJtkdbX1ED1 ptuA8dc5qA== =uhAj -----END PGP SIGNATURE-----