-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 25 Feb 2020 19:22:52 +0100
Source: sympa
Architecture: source
Version: 6.2.40~dfsg-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Sympa team <sy...@packages.debian.org>
Changed-By: Stefan Hornburg (Racke) <ra...@linuxia.de>
Closes: 952428
Changes:
sympa (6.2.40~dfsg-4) unstable; urgency=medium
.
* Apply patch to fix Sympa web interface vulnerability: CVE-2020-9369
(Closes: #952428). This prevents
creation of temporary files and email notifications to listmasters when
encountering
malformed input parameters.
Checksums-Sha1:
011f52aab1853e7c75265eee3ec63773d9621044 2531 sympa_6.2.40~dfsg-4.dsc
50e63655bd87832351a4eda867f9a94f5b488fb6 166076
sympa_6.2.40~dfsg-4.debian.tar.xz
70de373c11a04859059b53b97ea10c4afd1cbb42 14357
sympa_6.2.40~dfsg-4_amd64.buildinfo
Checksums-Sha256:
31fca930776b318af22b445fa1a682d63f131f64bc0d073aa11db012ad3d2837 2531
sympa_6.2.40~dfsg-4.dsc
8f3ef0fbf36b7beda4cf511cd33ddd6506857f6c4d3735e1d1f1d3d06f8e8364 166076
sympa_6.2.40~dfsg-4.debian.tar.xz
1c616b2d2e742fcc260ca65d04f06fe90b02ed7ec3c2d060808369042174a6be 14357
sympa_6.2.40~dfsg-4_amd64.buildinfo
Files:
c310084657d4d4a6cd601a9bce8794e1 2531 mail optional sympa_6.2.40~dfsg-4.dsc
de652b3f3c90e4708fcb1a217070b5f0 166076 mail optional
sympa_6.2.40~dfsg-4.debian.tar.xz
c2092e4a581330ef6ecaeee319154e4a 14357 mail optional
sympa_6.2.40~dfsg-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Nsyu
-----END PGP SIGNATURE-----
