Accepted cakephp 1.3.15-1+deb7u2 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Feb 2017 07:23:33 +0100
Source: cakephp
Binary: cakephp cakephp-scripts
Architecture: source all
Version: 1.3.15-1+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Chris Lamb <lamby@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
cakephp - MVC rapid application development framework for PHP
cakephp-scripts - MVC rapid application development framework for PHP (scripts)
Changes:
cakephp (1.3.15-1+deb7u2) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2016-4793:
The getClientIP function allowed remote attackers to spoof their IP
address. This vulnerability could be used to bypass access control lists
to get access to sensitive data, or lead to higher severity vulnerabilities
if untrusted data returned by getClientIP() is treated as safe and used
without appropriate sanitization within SQL queries, system command calls
etc.
Checksums-Sha1:
3863f15af4140edf8b29282baffd5e9c6607f056 2017 cakephp_1.3.15-1+deb7u2.dsc
d29408bb6c6dceac7bf1fad24f7a34dcead671d5 8208 cakephp_1.3.15-1+deb7u2.debian.tar.gz
205530008602e302ef0092ca7d91aec8e24b90b9 905746 cakephp_1.3.15-1+deb7u2_all.deb
914391ea3145973b3ebcd519a586e3063033953c 113314 cakephp-scripts_1.3.15-1+deb7u2_all.deb
Checksums-Sha256:
d08d5ba2e22801681777f1763777a00b231a2b5c07f73b87fddb8f7cd7d1bc4b 2017 cakephp_1.3.15-1+deb7u2.dsc
a14e36bcd6b44eba0a052677c4dd12f9a68deb2d771bb38a2df012ae3fe9fe56 8208 cakephp_1.3.15-1+deb7u2.debian.tar.gz
4986b5b4ce235c4c1218a20605361672d4cdf3d76830aa3ca2785d3194af0543 905746 cakephp_1.3.15-1+deb7u2_all.deb
a5a94ad6b22b101548533de7fc4a2bbd829800b5f7e7cc97d87da4836aa2b2e7 113314 cakephp-scripts_1.3.15-1+deb7u2_all.deb
Files:
37bc1d32ea60a29ba0fe71ed9dec78ef 2017 web optional cakephp_1.3.15-1+deb7u2.dsc
6760d7b46d36fd04ee0fc26167e2a02e 8208 web optional cakephp_1.3.15-1+deb7u2.debian.tar.gz
fb1ce544a55ed83878f58bf74dd3f842 905746 web optional cakephp_1.3.15-1+deb7u2_all.deb
eb04d79f8da63e7d7097f57c253b0e1c 113314 web optional cakephp-scripts_1.3.15-1+deb7u2_all.deb
-----BEGIN PGP SIGNATURE-----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=fHfN
-----END PGP SIGNATURE-----
Reply to: