Accepted moin 1.9.8-1+deb8u2 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Oct 2018 19:23:10 +0200
Source: moin
Binary: python-moinmoin
Architecture: source all
Version: 1.9.8-1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Steve McIntyre <93sam@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
python-moinmoin - Python clone of WikiWiki - library
Changes:
moin (1.9.8-1+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2017-5934:
Nitin Venkatesh discovered a cross-site scripting vulnerability in moin, a
Python clone of WikiWiki. A remote attacker can conduct cross-site
scripting attacks via the GUI editor's link dialogue. This only affects
installations which have set up fckeditor (not enabled by default).
Checksums-Sha1:
4dbefaa5463460ee4469688295c1c0cd13602af8 2044 moin_1.9.8-1+deb8u2.dsc
9929627c8b5bb52aea705f7cf7c09e4e8c2fde82 149688 moin_1.9.8-1+deb8u2.debian.tar.xz
082445056a26b64c9a9b82c271131bffb906f8bd 7996448 python-moinmoin_1.9.8-1+deb8u2_all.deb
Checksums-Sha256:
4005555a3402de219b44d945d9db2895cd8c4c718a27d68ce554b1fcb0d55d75 2044 moin_1.9.8-1+deb8u2.dsc
184251bc723544d84d93bd55665bf9cc9780aa5b53ae739087ac4a0bb1fe1e8c 149688 moin_1.9.8-1+deb8u2.debian.tar.xz
b0870d201cf91cdc439d99cc151c130abf99d5e4a6e596911ec3466fe349b378 7996448 python-moinmoin_1.9.8-1+deb8u2_all.deb
Files:
d7f86c044ae15eea29358f0833b407b3 2044 net optional moin_1.9.8-1+deb8u2.dsc
9548bf8b96fa2db4d35193738e1bc473 149688 net optional moin_1.9.8-1+deb8u2.debian.tar.xz
b00990411962d5b15e0292fb27220c0c 7996448 python optional python-moinmoin_1.9.8-1+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlvE9sxfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkqpIP/iauXZ1a6mgzUOlMKK6cIXQMBaa47Vg89B5E
TrOar9bK0R8UQLWyU9ULhZvgyAtZc9Twb8z+7Ev61JRmn8L7scjtKBOqxF3JXEK3
9+9QaOSdqMzxScoBsWmpQJO86GME8b4pPcs0Mmli/JXSJ0X0KwNcr5tJI4ne8fRn
ljV34hyKh8noW3UDSUMZpcjAh5i3itcT3UNClKVxJnSmPP/Ew1B7CK5Qs1NwW8kw
w+VsqIlFrFJOIV+x2snjCNkjeKsiZQodvHfy3Nn1GaYufuH2tSJ4oBmfCM0I/iD2
YjnUB7ZY12hnpOLwuKAS60oyHTN0g8GurXFNDzdTpKvMZdE+nhGuWJxqQINd47QA
PJVCzAjGh+OURgM8Ci/0MCy6Wvw+tCqnkaugfC9aCl24+3jxPULB+ausjr4HTXlP
9OVPh8HL9zbcy35sbqmUeNYQklwDCZUcxNQN9sFk3WLnwen+nXfhVwLlCk0SuUCm
Sq3KYeJ7mF9hD9ST7Iu7S0tcD/kWIrzjMfX3Uz81zbnrYm1aeXM4JhTUuROPyNWu
XLnFG0pzl0UsGQ+WGymJ45lGXJmpNJzBWF8e7FEtLpc4QhW+DmWVvetuxT67uhfC
VglKduQ3f85p3+asiYAaDrt6OXZg3yb24CfpBVBVdlGnd5LStTqyo5HLJ/nonOtb
tH0UZvuo
=0duE
-----END PGP SIGNATURE-----