Accepted spip 3.1.4-4~deb9u4 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 09 Dec 2020 09:59:07 +0530
Source: spip
Binary: spip
Architecture: source all
Version: 3.1.4-4~deb9u4
Distribution: stretch-security
Urgency: medium
Maintainer: David Prévot <taffit@debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
spip - website engine for publishing
Changes:
spip (3.1.4-4~deb9u4) stretch-security; urgency=medium
.
* Non-maintainer upload by the LTS Security Team.
* Fix CVE-2020-28984: did not correctly validate he couleur,
display, display_navigation, display_outils, imessage, and
spip_ecran parameters.
Checksums-Sha1:
c01762331c59be310caa10154f6f7f797954897f 1854 spip_3.1.4-4~deb9u4.dsc
5c11a4ba509364298fda7e5e6838c7caead8d091 5848656 spip_3.1.4.orig.tar.xz
53c9dba65aa7475ede5dd7795262c15f8a7ae184 94200 spip_3.1.4-4~deb9u4.debian.tar.xz
5bd1311c4cdc8744dc5025c37d818a45468c18f2 4919598 spip_3.1.4-4~deb9u4_all.deb
9db321d3125f3b0b2ba51609f534781c3a9188d9 8299 spip_3.1.4-4~deb9u4_amd64.buildinfo
Checksums-Sha256:
b84402ad7387a8a5e59fe81245874cc777ef69a089e7c058f5ea279f0f0515b6 1854 spip_3.1.4-4~deb9u4.dsc
884778eca338242da714641727b9acaa8ec10a5aefeefc1dbe1d38ad379d8318 5848656 spip_3.1.4.orig.tar.xz
10a476c5908618cf08fa9d0fe7fd885e555f0c56ddeacf19b2dc2ccb755789ae 94200 spip_3.1.4-4~deb9u4.debian.tar.xz
2be7677d040b2ec714c22c74446e3e663c76f0bb752d4b31aa9b78e487c20a09 4919598 spip_3.1.4-4~deb9u4_all.deb
ac5d512a5b7e9502b7bf7b085ba827b51dce04c9541fa2f70e625eb79a055d31 8299 spip_3.1.4-4~deb9u4_amd64.buildinfo
Files:
4174c50f3da1518a4c33db61268b8521 1854 web extra spip_3.1.4-4~deb9u4.dsc
773ba92d20896200e8301361cbc814f6 5848656 web extra spip_3.1.4.orig.tar.xz
623c8b7bd31879167b8424b275309bc7 94200 web extra spip_3.1.4-4~deb9u4.debian.tar.xz
e7ce2d6f232e0e715275114c15fe74ee 4919598 web extra spip_3.1.4-4~deb9u4_all.deb
13f7ee9425e56804083758f8ff4cd93a 8299 web extra spip_3.1.4-4~deb9u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAl/i4PgUHGFiaGlqaXRo
QGRlYmlhbi5vcmcACgkQhj1N8u2cKO/B6A//aZNvkM1JAxSUeDB9lV/XcNJNJK/T
I34IlyCldb4HHx/q7jqOyFr2S9dcgKUEvvzs0KeZhnCb+djSXiZvOXN9Neim7NGT
WAtiInzwan44cXja9AfqDvhuov2qzlOVct83TMUp3tkUyrMgg4bcaUDMfJfqfd91
GdhqNVvfEuuhzDCVp/7g0VN8q6bYwGos9lQqRCzhPu540XltB1bjFd2d6hBrY6VW
9mRfoqqwvl2DMTWC52sA3VdNUwgYmfu7LOkKkNxboUBbsBd3Uvk7s3lf4Exkee12
aZitL4BwCIYY+e3w1ZPiMHqcv7atOtgCUUVg97Z57/CW5EEDaIeeHe++lUdY019L
PiVDApGT8vkewxRgV/o31IMsONaO8C3V3qQJOm0BRCVt4J26sRBYsijav/w2y8pn
kQfp+ll1Ifxmo1Sst3Oi9ZKWoN0P9NYHeIOUI7ZmNpYAmFO1/WA1z64h/rMTzEFX
zlagr3bBxcOcYUg+Mj/fRs/ZYLKP1r+yOok+hsyxHbsbXS9n61jWpQ9JspfgOS2j
+6ebToIA4LcNnKD+7EKb+qZS1yYxMJDrS+MlnyV0DOzui3KxHDMrkwAq4l4VOffc
s5SxhcgVf/Xdi6Je6A4rqsMClNSxBRdD6Zs80CBBv3mPGv79H0O+hYNlynF1PL+U
4UlCY95qEEUZCYw=
=5Fr9
-----END PGP SIGNATURE-----
Reply to: