Accepted gunicorn 19.0-1+deb8u1 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 22 Apr 2018 11:14:07 +0200
Source: gunicorn
Binary: gunicorn
Architecture: source all
Version: 19.0-1+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Chris Lamb <lamby@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
gunicorn - Event-based HTTP/WSGI server
Closes: 896548
Changes:
gunicorn (19.0-1+deb8u1) jessie-security; urgency=high
.
* CVE-2018-1000164: Fix an issue where CRLF sequences in HTTP headers could
result in an attacker tricking the server into returning arbitrary HTTP
headers. (Closes: #896548)
Checksums-Sha1:
884a6ca6852b96128b8b927f008e440cc891abe3 1881 gunicorn_19.0-1+deb8u1.dsc
632a06634b6796a9976208e7997c80e06e2587c5 385165 gunicorn_19.0.orig.tar.gz
1be42a8ac5e134c944700afec96982ade04bed68 10184 gunicorn_19.0-1+deb8u1.debian.tar.xz
499ede5fa925452f9ca42313cfd690fe8e25f1bf 131416 gunicorn_19.0-1+deb8u1_all.deb
Checksums-Sha256:
90e4e1e39e2ef21f89905c383e94c79febcd6374c92bf8f2f729162eca22e722 1881 gunicorn_19.0-1+deb8u1.dsc
9c277c1c10e914d648f2cb8b5245a23ff0289255e195f74e96117e944e1b087f 385165 gunicorn_19.0.orig.tar.gz
de18bd4947b3883cc3bfdc5da51269ea9750c2d145aa27150da4530909e82fb6 10184 gunicorn_19.0-1+deb8u1.debian.tar.xz
23e7e0b3b820dbce0ff21ba89a8df824be5b08e429a51756a10e5d5aab5c6676 131416 gunicorn_19.0-1+deb8u1_all.deb
Files:
81b9da552cb2e3c2cf3a8cc230fd01bc 1881 python optional gunicorn_19.0-1+deb8u1.dsc
ad158eb9b5e8f74b223c0ccfba7dae8f 385165 python optional gunicorn_19.0.orig.tar.gz
d71207821f721807f8265c67e89f3da9 10184 python optional gunicorn_19.0-1+deb8u1.debian.tar.xz
4f44afeb19ceb24449659e002b352669 131416 python optional gunicorn_19.0-1+deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----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=00kJ
-----END PGP SIGNATURE-----
Reply to: