Accepted extplorer 2.1.0b6+dfsg.3-4+deb7u4 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 15 Aug 2016 23:09:16 +0100
Source: extplorer
Binary: extplorer
Architecture: source all
Version: 2.1.0b6+dfsg.3-4+deb7u4
Distribution: wheezy-security
Urgency: high
Maintainer: Thomas Goirand <zigo@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
extplorer - web file explorer and manager using Ext JS
Changes:
extplorer (2.1.0b6+dfsg.3-4+deb7u4) wheezy-security; urgency=high
.
* CVE-2016-4313: Fix archive traversal exploit in .zip extraction. The
unzip/extract feature allowed for path traversal as decompressed files can
be placed outside of the intended target directory if the archive content
contained "../" characters.
Checksums-Sha1:
7170b074f45fd39ccad5c1c80c37666f8d71f332 1892 extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc
be7ea3a1af9ab4949d5083d30b78dd53aab74952 333069 extplorer_2.1.0b6+dfsg.3.orig.tar.gz
e341dcd4894ee4afd04c4f182f9c7744ac6e7299 16529 extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz
4d9ea71c6a1bb19fde506ebebeeb60ea6c6f6f42 351548 extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb
Checksums-Sha256:
0bc2ebbca605a5de48c9c22f7921c05e69be3c9e5f00fcccf17101fb26f0f9af 1892 extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc
466040f5755f9f27247b1bded0d764ed5b0ff6007d3de08413059d53341969fb 333069 extplorer_2.1.0b6+dfsg.3.orig.tar.gz
f932ffb5e8d3752e3b80a023ebf886a79ac087772f02ee323d0cee740943fb1c 16529 extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz
1a17648521fc4739e0a6023ab169982d05e6c7f2948e381aea9f323daad0798c 351548 extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb
Files:
a62fe43fc5c1bb0f485c8d1c5121764d 1892 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4.dsc
44d5dce06700b2c99499e57c0525106e 333069 web optional extplorer_2.1.0b6+dfsg.3.orig.tar.gz
4bf2c46a5873472e36925d52eed44a42 16529 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4.debian.tar.gz
86784c734cf5784c740b053c609a162e 351548 web optional extplorer_2.1.0b6+dfsg.3-4+deb7u4_all.deb
-----BEGIN PGP SIGNATURE-----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=IiS6
-----END PGP SIGNATURE-----
Reply to: