-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 1 Nov 2006 22:22:41 +0100
Source: ingo1
Binary: ingo1
Architecture: source all
Version: 1.0.1-1sarge1
Distribution: stable-security
Urgency: high
Maintainer: Horde Maintainers <pkg-horde-hackers@lists.alioth.debian.org>
Changed-By: Lionel Elie Mamane <lmamane@debian.org>
Description:
ingo1 - email filter component for Horde Framework
Closes: 396099
Changes:
ingo1 (1.0.1-1sarge1) stable-security; urgency=high
.
* Security update:
- Fix remote autenticated user arbitrary command execution
via shell metacharacters in mailbox name (closes: #396099)
This is CVE-2006-5449.
* Change maintainer to Horde team.
Files:
b8be1fc591da938deb08cb78a9d42f0d 683 web optional ingo1_1.0.1-1sarge1.dsc
509bf92a2ee44597d6ffd9a0a9b4a039 733108 web optional ingo1_1.0.1.orig.tar.gz
358e14a64fe43a56cc1b9742f271c3ec 5161 web optional ingo1_1.0.1-1sarge1.diff.gz
83f7044a2861f8e6aaea0c684fb2f6e0 760018 web optional ingo1_1.0.1-1sarge1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFFSj8kXm3vHE4uyloRAnlLAJ47kwlCnyBZKGdzhVhmXJu6pZ70NACgnMK7
f+Qd0ESTqDnogSZBTh/EuPM=
=BMC2
-----END PGP SIGNATURE-----
Accepted:
ingo1_1.0.1-1sarge1.diff.gz
to pool/main/i/ingo1/ingo1_1.0.1-1sarge1.diff.gz
ingo1_1.0.1-1sarge1.dsc
to pool/main/i/ingo1/ingo1_1.0.1-1sarge1.dsc
ingo1_1.0.1-1sarge1_all.deb
to pool/main/i/ingo1/ingo1_1.0.1-1sarge1_all.deb