[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted phpgedview 4.0.2.dfsg-3 (source all)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 27 Apr 2008 10:10:53 +0200
Source: phpgedview
Binary: phpgedview-places phpgedview-languages phpgedview phpgedview-themes
Architecture: source all
Version: 4.0.2.dfsg-3
Distribution: stable-security
Urgency: high
Maintainer: Thijs Kinkhorst <thijs@debian.org>
Changed-By: Thijs Kinkhorst <thijs@debian.org>
Description: 
 phpgedview - Web-based genealogy viewer and editor
 phpgedview-languages - Language modules for PhpGedView
 phpgedview-places - Place names and maps for PhpGedView
 phpgedview-themes - PhpGedView themes
Closes: 443901
Changes: 
 phpgedview (4.0.2.dfsg-3) stable-security; urgency=high
 .
   * Upload to stable to fix security issue.
   * Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1
     allow remote attackers to inject arbitrary web script or HTML via the (1)
     box_width, (2) PEDIGREE_GENERATIONS, and (3) rootid parameters in
     ancestry.php, and the (4) newpid parameter in timeline.php.
     (CVE-2007-5051, Closes: #443901)
Files: 
 30d7415d993b4034f44fdfcd9bf9d998 1053 web optional phpgedview_4.0.2.dfsg-3.dsc
 73b1f051f01dcd6520a044badaa40fe6 6181964 web optional phpgedview_4.0.2.dfsg.orig.tar.gz
 0ae3d02bf2f9bfecac01bfbb98e16b53 7845 web optional phpgedview_4.0.2.dfsg-3.diff.gz
 dff7649b79e3f32ee6868839cd3c4c68 1215452 web optional phpgedview_4.0.2.dfsg-3_all.deb
 0745d130e09318bd72790028db6a943d 876616 web optional phpgedview-themes_4.0.2.dfsg-3_all.deb
 ce02af3e71b958d0fd3f72c1eea9eca4 2270996 web optional phpgedview-places_4.0.2.dfsg-3_all.deb
 1b004f9221d532a1e07eb242bdd13ba1 1821112 web optional phpgedview-languages_4.0.2.dfsg-3_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBSBQ2s2z0hbPcukPfAQJdZQgAg/KvMwKyOjfMEKu621HOcsYj4+0bjhH7
COnK1PvGBgrZWPrFVjDRiMInBEU2ucHQgGtArIO5dyCmg2xL6oA1qgkapuWCkZLo
TzQ7McL+ZAfhUTnH7QLgO5NC9DpXzlx79TiOoH8j8zbzVQbSy3EILZbsuCnGABM7
AeiF+oaxbFo/YOI3rbS3pE+15nsd32jfKoUcOtD2tiKpfPIDnLWT0NbBPAHg9YPK
x89eGp78vT0CqkSA3A3vF5+IA2benxb0rjjIQ2wFlIewyQRJ4yXLiNrlB9bveAGN
Av1VIJVIDt2SCf+Rfb4H3sYwGI0jWYPlOHrAIb03AuiuRChbPI2WUg==
=V+F9
-----END PGP SIGNATURE-----


Accepted:
phpgedview-languages_4.0.2.dfsg-3_all.deb
  to pool/main/p/phpgedview/phpgedview-languages_4.0.2.dfsg-3_all.deb
phpgedview-places_4.0.2.dfsg-3_all.deb
  to pool/main/p/phpgedview/phpgedview-places_4.0.2.dfsg-3_all.deb
phpgedview-themes_4.0.2.dfsg-3_all.deb
  to pool/main/p/phpgedview/phpgedview-themes_4.0.2.dfsg-3_all.deb
phpgedview_4.0.2.dfsg-3.diff.gz
  to pool/main/p/phpgedview/phpgedview_4.0.2.dfsg-3.diff.gz
phpgedview_4.0.2.dfsg-3.dsc
  to pool/main/p/phpgedview/phpgedview_4.0.2.dfsg-3.dsc
phpgedview_4.0.2.dfsg-3_all.deb
  to pool/main/p/phpgedview/phpgedview_4.0.2.dfsg-3_all.deb


Reply to: