-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 25 Feb 2016 22:43:55 -0600 Source: drupal7 Binary: drupal7 Architecture: source all Version: 7.43-1 Distribution: unstable Urgency: high Maintainer: Gunnar Wolf <gw...@debian.org> Changed-By: Gunnar Wolf <gw...@debian.org> Description: drupal7 - fully-featured content management framework Changes: drupal7 (7.43-1) unstable; urgency=high . * New upstream version * Fixes several security vulnerabilities (SA-CORE-2016-001): File upload access bypass and DoS, brute force amplification attack via XML-RPC, open redirect via path manipulation, reflected file download, wrong modes set on some user accounts setting saves, information disclosure of email addresses * Several non-security bugfixes from 7.42 included * Fix typo in README.Debian * Add several needed lintian overrides Checksums-Sha1: eaaa6c49f98167a1bf5c755f1b4ec2cc3f13273f 1869 drupal7_7.43-1.dsc 2979eb3ce141bb11a743e39ed6428d3728a05d01 3265824 drupal7_7.43.orig.tar.gz 4b40cfabad96e63057f91741e219f8f5bfbb4044 173492 drupal7_7.43-1.debian.tar.xz 113ef90b2c9c06e99339d9c40f5dbc154b27feb8 2499462 drupal7_7.43-1_all.deb Checksums-Sha256: b96a76d22ed7b23362c920d38ce58d34a9634d1f316f115d6e9016602e086380 1869 drupal7_7.43-1.dsc 468c1e5864ad6a86e760108f0cb0eac6bf004a198c49e77117b99af31e31b16a 3265824 drupal7_7.43.orig.tar.gz 424fc523cf168b5d0ef9c939ff0f7c6737a008f778c8e0ee703595c400bf1b7d 173492 drupal7_7.43-1.debian.tar.xz 9ad43a8f5cdc1d4bda93d98d8c25d8cb6fab24acca747928f2f62b0310164e59 2499462 drupal7_7.43-1_all.deb Files: 7e01be65263ccd335e1110642bceef74 1869 web extra drupal7_7.43-1.dsc c6fb49bc88a6408a985afddac76b9f8b 3265824 web extra drupal7_7.43.orig.tar.gz f6e4d28afd9f288501fb82fc5e726b79 173492 web extra drupal7_7.43-1.debian.tar.xz 6b90a4949bd864fa48e4f61d9c60572b 2499462 web extra drupal7_7.43-1_all.deb
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWz+mvAAoJEGc6A+TB25IfE3gP/iAt+dELYg4CcVbvhtEMGXkt UzDOFWwFOADDWZPq1P2sAAaRZ4+1VDzbYEMChf/6S7Lag07AHsJUDFa54Y/TK6pJ Mta9YV/HZYrYSGY4BT8XatRT9gmOx6fXwX+1GDsmX0ODug5fW/TWcoqH5Z+slVMX Hz9HI/yT50s7XEULuEGcXT5wTzbu4/yJxTnMC6yUTysRqZWqEY85jFW7i1v5r/i2 0D+oPnfnLzDfWzoCE42AuYAvpP+1+ejIWlraNwNs908YhqrQMS1IYBZ+GB5hZzlK HhcHFMrX2cPGNkPawAwFvi3zcQ0+mcSpRmIa9G1K8RZAfMZa2JiLi9URKBrJSefu HNH5R8Wxc4D8PrJ9YPiJhcC3yOkkohYjtVPQ4XriCnNDQi+1JxYCAHO7FO9bAZnW B6HuBXHkW+M/uITrJ5wa7yyuC5FTOCcgnEZjLjWs+5FdXBcqclDq4tWrz9pIjE3M a2MPD0aQ/P9iUsF3hHcTM4zDiiTTWpopX+Sbb6Ttr9ZhUJZ3d+EPT0odHo19B6BH dMXZbLiWz+yd3ogvBd3hk4GtuYoK2NBYE7/JcxEIeXBp6lo9zphto0Zgi779MZc5 URvfWg+0LgPqAbE+XdWi2WUWIXN6yLnpI62AFtq4Lwqx9eJaMoA9nc+yNh/RdgXP Y7NaKS8djMEa69FHxJCC =dpfB -----END PGP SIGNATURE-----