Format: 1.8
Date: Mon, 07 Dec 2020 12:08:43 +0100
Source: apt
Binary: apt apt-utils libapt-pkg-dev libapt-pkg6.0
Architecture: i386 i386_translations
Version: 2.0.2ubuntu0.2
Distribution: focal
Urgency: high
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-027.buildd>
Changed-By: Julian Andres Klode <juliank@ubuntu.com>
Description:
 apt        - commandline package manager
 apt-utils  - package management related utility programs
 libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst
 libapt-pkg6.0 - package management runtime library
Launchpad-Bugs-Fixed: 1899193
Changes:
 apt (2.0.2ubuntu0.2) focal-security; urgency=high
 .
   * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193)
     - apt-pkg/contrib/arfile.cc: add extra checks.
     - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB
     - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB
     - test/*: add tests.
     - CVE-2020-27350
   * Additional hardening:
     - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB
   * .gitlab-ci.yml: Test on focal, not unstable
Checksums-Sha1:
 29ceafefba1459647b6dfbebbb8fcc31bbe8632d 6121812 apt-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 8fb4e5d578e0f15b75f69730877a69a3bfa64d4a 1796044 apt-utils-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 9adfea35df6f5aaf2fdcdb1a609b0eb24e3bb673 227448 apt-utils_2.0.2ubuntu0.2_i386.deb
 e669f83147def1663ee288e20c3ba14d0ff8a409 9867 apt_2.0.2ubuntu0.2_i386.buildinfo
 dd7876796a7c233e44b5d4df894d45cccdb5640a 1319212 apt_2.0.2ubuntu0.2_i386.deb
 f40f2f4e82b6bcf3e1b4122e3cbb080d816a9300 6322489 apt_2.0.2ubuntu0.2_i386_translations.tar.gz
 b4d81cf1ff4f9c7a32b67b5775a00b4de5c70d48 97892 libapt-pkg-dev_2.0.2ubuntu0.2_i386.deb
 7938dc507c259529c2db2ae9137b99161b0834e0 9547480 libapt-pkg6.0-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 19368ae6012d3404f5e617e645a72a55a4dd5b70 905804 libapt-pkg6.0_2.0.2ubuntu0.2_i386.deb
Checksums-Sha256:
 ad32913b85b943ec30cf0ecd0c1b065fb883526e7973d659304ac61b45a21f7b 6121812 apt-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 2b5f78eb6f452b50d96ab3718f5864a2fcb9edc1ae5991feb6ec7269bc8cf23e 1796044 apt-utils-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 87a404a24e2e4c47732bb78459e28142be99d6017716413ad71133c34ed45edf 227448 apt-utils_2.0.2ubuntu0.2_i386.deb
 2bcdbdcec403cb40ceaa73ed5a4d046ca66bb921b2a1755d2ff80b25562c7f45 9867 apt_2.0.2ubuntu0.2_i386.buildinfo
 e56c28e81b26a6742942368d784c0055477edb9654b967cdba3067de18553a87 1319212 apt_2.0.2ubuntu0.2_i386.deb
 50ac1c048a1411a769fa1b5c98cff9699dd1c04612b7c05d55d3a5961fd6b078 6322489 apt_2.0.2ubuntu0.2_i386_translations.tar.gz
 668f9ef6025d136cc6cb858cdef0289dcbd33d05a3934f1f1ac4f9475448668c 97892 libapt-pkg-dev_2.0.2ubuntu0.2_i386.deb
 3e9e0c96663598ecda61f75a9a4f6b7638ef92b255c4153813fa0ac5add9fae0 9547480 libapt-pkg6.0-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 63c3728bf04df5335135d098e4bf893e8b0bc8d14db01726caef179f8b644d9f 905804 libapt-pkg6.0_2.0.2ubuntu0.2_i386.deb
Files:
 f32dbf7fc39504bd355532e47a293029 6121812 debug optional apt-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 eb5867315ca9d2d37e8d830ff6d0c1c4 1796044 debug optional apt-utils-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 b6fab7ca2baf3e51fecd11682261d3db 227448 admin important apt-utils_2.0.2ubuntu0.2_i386.deb
 09de78d7967dd35729de442cc5b947a0 9867 admin important apt_2.0.2ubuntu0.2_i386.buildinfo
 4ad95ec064163edab4be31b67cfff434 1319212 admin important apt_2.0.2ubuntu0.2_i386.deb
 37804bed6d6e7b72c0f782c4fd81733d 6322489 raw-translations - apt_2.0.2ubuntu0.2_i386_translations.tar.gz
 bda07bbe24b268b65ee582648f6ddc1a 97892 libdevel optional libapt-pkg-dev_2.0.2ubuntu0.2_i386.deb
 7da446351bf27ba5ff4def75377558f6 9547480 debug optional libapt-pkg6.0-dbgsym_2.0.2ubuntu0.2_i386.ddeb
 0c0afcbebe395e20c8b51f33f343d610 905804 libs optional libapt-pkg6.0_2.0.2ubuntu0.2_i386.deb
Original-Maintainer: APT Development Team <deity@lists.debian.org>