-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Aug 2021 13:19:47 +0000 Source: sabnzbdplus Architecture: source Version: 3.1.1+dfsg-2+deb11u1 Distribution: bullseye Urgency: medium Maintainer: JCF Ploemen (jcfp) Changed-By: Jeroen Ploemen Changes: sabnzbdplus (3.1.1+dfsg-2+deb11u1) bullseye; urgency=medium . * Backport upstream security fix to prevent a directory escape in the renamer function via malicious par2 files. (CVE-2021-29488) Checksums-Sha1: 90ba95b6adc0f8d890d8f60e0bfe5909cb5d693a 2329 sabnzbdplus_3.1.1+dfsg-2+deb11u1.dsc b1141b86c06c3bd2b71578374abaaaf7a1a2774a 33440 sabnzbdplus_3.1.1+dfsg-2+deb11u1.debian.tar.xz 210d801c9182961531a4b5039286aaf3603e8b2e 14610 sabnzbdplus_3.1.1+dfsg-2+deb11u1_source.buildinfo Checksums-Sha256: 1be7f1d07d44ca4cb767608820b90c586d2f9cb98e3847a41dc4c8cbca68339a 2329 sabnzbdplus_3.1.1+dfsg-2+deb11u1.dsc eb67b17c5dee97d3df91d2638ee3e27d2757ebd1f01b69f0fb113b4d55efd631 33440 sabnzbdplus_3.1.1+dfsg-2+deb11u1.debian.tar.xz 12a1721280880dbec7c86e42868c84ef9bcec19e0c2dc905ec94fdf6f6b64c76 14610 sabnzbdplus_3.1.1+dfsg-2+deb11u1_source.buildinfo Files: 78f8d7d88ce32c44e757554737889690 2329 contrib/net optional sabnzbdplus_3.1.1+dfsg-2+deb11u1.dsc 664b6b7503554e7d84b2ad27ccfb7bdc 33440 contrib/net optional sabnzbdplus_3.1.1+dfsg-2+deb11u1.debian.tar.xz c0c6aedbaf1af4ca48b8597907e1b193 14610 contrib/net optional sabnzbdplus_3.1.1+dfsg-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEEd8lhnEnWos3N8v+qQoMEoXSNzHoFAmEnmmwQHGpjZnBAZGVi aWFuLm9yZwAKCRBCgwShdI3MelPHEACJmmijsLJTEQGaAdnahyOITliOzc8RDBAZ aGUcTROnvNuP77TGDPp3kt/mhOrnVloyK/OxcFKQuNEPwklgEpgfeQhXAIPvo6bA aX50FyWcc36P6Esa+r5ArNkfB2LTV8Lu6IBC2TYw4vu38lf24rdqLhQcWNy9uWGC YIsFUgNYP9FT8P2J1j36g40Vsz08mqPCWsWES77sUNRlXVcQDXJCrV3dhzzznauQ AnnBAny5I1SSnzhO0skAMRPSeC+ZBObWgZcsm4+Jf1OXTUDGOGnlJ/iLwEUdKMEN nAFDip4o/WMg4grIs/a5x+K+zPd5NBQOGsPYoDwHWUBs3vjwVgU9T39NIn32ym/L NjJSKOxt2ccFFIOFqO6H7qh8b0LCpPPTq4KFyA8TtEcEUs/5i/aWvvKBa8XLiqph 17Nu1V3TKLZEoybTSmbrCUivQejFL3yVvn/Rpfag4FsOtwzcWc7mSAa3JQl6Jp/f lVfg7B0/G9CF7Z7t7HDj5tUZi8h4kOfSzc1jio69OKcCG/2EQQPLGDa0OlKCHN4N 3IGIDqO2Rb7dlA5Bht24MYbRTZuUbnz86zDj78TjMyf4lQMMd78wfaTGxpIeL/FH WCdJpVMX40VuGoQTlsln94IKBV99wYdcVc6UVItzy8YS+LQV5/qQY62pxvL9/rkm PtsFp2hrsQ== =aelr -----END PGP SIGNATURE-----