Ubuntu
simplestreams package

simplestreams 0.1.0~bzr354-0ubuntu1.15.04.1 source package in Ubuntu

Changelog

simplestreams (0.1.0~bzr354-0ubuntu1.15.04.1) vivid-security; urgency=medium

  * SECURITY UPDATE: insufficient verification of GPG signatures
    allowing malicious injection into images
    - debian/patches/lp1487004-use-checksumming-reader.patch: Ensure
      that users of the BasicMirrorWriter get exceptions when importing
      data that has invalid checksum or sizes. (LP: #1487004)
    - CVE-2015-1337
    - debian/patches/lp1487004-sru-safetynet.patch:
      provide a backwards compatible behavior via setting
      SS_MISSING_ITEM_CHECKSUM_BEHAVIOR=silent. See bug for more info.

 -- Scott Moser <email address hidden>  Tue, 22 Sep 2015 16:32:45 -0400

Upload details

Uploaded by:
Scott Moser
Sponsored by:
Steve Beattie
Uploaded to:
Vivid
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Vivid: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
simplestreams_0.1.0~bzr354.orig.tar.gz 78.3 KiB 42da32fb4817a1fa82716dc0274d7e645d8292af1d953f4f97b5d03097cdcc9b
simplestreams_0.1.0~bzr354-0ubuntu1.15.04.1.debian.tar.xz 11.4 KiB 98a049d87b3daf231196dd1253a7ccf70552e921c54380b8aae31e167521c475
simplestreams_0.1.0~bzr354-0ubuntu1.15.04.1.dsc 2.2 KiB f008d95298c5b26b033e18a8605d95cf1dfaab1fb06ca28832fdc1253da3f113

View changes file

Binary packages built by this source

python-simplestreams: No summary available for python-simplestreams in ubuntu vivid.

No description available for python-simplestreams in ubuntu vivid.

python-simplestreams-openstack: No summary available for python-simplestreams-openstack in ubuntu vivid.

No description available for python-simplestreams-openstack in ubuntu vivid.

python3-simplestreams: No summary available for python3-simplestreams in ubuntu vivid.

No description available for python3-simplestreams in ubuntu vivid.

simplestreams: No summary available for simplestreams in ubuntu vivid.

No description available for simplestreams in ubuntu vivid.