Accepted webcalendar 1.1.6-7 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 24 Feb 2008 00:47:40 +0100
Source: webcalendar
Binary: webcalendar
Architecture: source all
Version: 1.1.6-7
Distribution: experimental
Urgency: low
Maintainer: WebCalendar Debian package development <rafael-webcalendar@debian.org>
Changed-By: Rafael Laboissiere <rafael@debian.org>
Description:
webcalendar - PHP-Based multi-user calendar
Closes: 466935
Changes:
webcalendar (1.1.6-7) experimental; urgency=low
.
* debian/patches/13_CVE-2007-6696.dpatch: Fixes for the three cross-site
scripting (XSS) vulnerabilites described in CVE-2007-6696 (closes:
#466935)
* debian/sql/upgrade-*/1.1.6-7: Force the ALLOW_HTML_DESCRIPTION
configuration variable to 'N', as part of the fix for the
vulnerability above
* debian/NEWS.Debian: Add a note explaining the conservative change of
ALLOW_HTML_DESCRIPTION
Files:
d7bf41624b98f04d14e1e0a3256366e5 954 web optional webcalendar_1.1.6-7.dsc
f81fa98f8b1a0e7b840f56c77ed76ed2 42304 web optional webcalendar_1.1.6-7.diff.gz
1ac9943bf0417325db9fd8a9a5bea9e1 1358806 web optional webcalendar_1.1.6-7_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFHy9Enk3oga0pdcv4RAplzAKCAUbxbfquFBlYysfPfGj58AGxbbgCeOA6Q
XB+4lFRIvsX8Fp2SEGVCdxo=
=hJIT
-----END PGP SIGNATURE-----
Accepted:
webcalendar_1.1.6-7.diff.gz
to pool/main/w/webcalendar/webcalendar_1.1.6-7.diff.gz
webcalendar_1.1.6-7.dsc
to pool/main/w/webcalendar/webcalendar_1.1.6-7.dsc
webcalendar_1.1.6-7_all.deb
to pool/main/w/webcalendar/webcalendar_1.1.6-7_all.deb
Reply to: