[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted gnatsweb 4.00-1.1 (source all)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 06 Oct 2007 15:03:47 +0200
Source: gnatsweb
Binary: gnatsweb
Architecture: source all
Version: 4.00-1.1
Distribution: unstable
Urgency: high
Maintainer: Chad Walstrom <chewie@debian.org>
Changed-By: Nico Golde <nion@debian.org>
Description: 
 gnatsweb   - Web interface to GNU GNATS
Closes: 427156
Changes: 
 gnatsweb (4.00-1.1) unstable; urgency=high
 .
   * Non-maintainer upload by testing security team.
   * Fixed missing escaping of the database parameter which leads
     to a cross-site scripting vulnerability (XSS) via this
     parameter (CVE-2007-2808) (Closes: # 427156).
Files: 
 63358364e415f98c5367add70a6af1bf 560 devel extra gnatsweb_4.00-1.1.dsc
 dd21e624e50358a98df96640e8c34d91 2417 devel extra gnatsweb_4.00-1.1.diff.gz
 d9baa962037c5869b55e5610d8c6b2de 55626 devel extra gnatsweb_4.00-1.1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHCfqgHYflSXNkfP8RAi6jAKCE8YwiOXvz2Uxn/6W8e1qyx5fECACghu0Z
3F1Tkz4ni2vy6n2YUXURcas=
=7JR5
-----END PGP SIGNATURE-----


Accepted:
gnatsweb_4.00-1.1.diff.gz
  to pool/main/g/gnatsweb/gnatsweb_4.00-1.1.diff.gz
gnatsweb_4.00-1.1.dsc
  to pool/main/g/gnatsweb/gnatsweb_4.00-1.1.dsc
gnatsweb_4.00-1.1_all.deb
  to pool/main/g/gnatsweb/gnatsweb_4.00-1.1_all.deb



Reply to: