Accepted sitebar 3.3.8-7etch1 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 5 Dec 2007 20:06:26 +0100
Source: sitebar
Binary: sitebar
Architecture: source all
Version: 3.3.8-7etch1
Distribution: stable-security
Urgency: high
Maintainer: Kevin Coyner <kevin@rustybear.com>
Changed-By: Steffen Joeris <white@debian.org>
Description:
sitebar - A web based bookmark manager written in PHP
Closes: 447135 448689 448690
Changes:
sitebar (3.3.8-7etch1) stable-security; urgency=high
.
* Non-maintainer upload by the security team
* Fix multiple security issues in the translator module (translator.php)
Fixes: CVE-2007-5491, CVE-2007-5492, CVE-2007-5693, CVE-2007-5694
(Closes: #447135)
* Fix possible redirect to other websites via the forward parameter in
command.php
Fixes: CVE-2007-5695 (Closes: #448690)
* Fix multiple XSS by adding more checks for certain parameters
Fixes: CVE-2007-5692 (Closes: #448689)
Files:
8af7750ff9a808798bf1b898c69b84d6 583 web optional sitebar_3.3.8-7etch1.dsc
fa7b5367808966c8db6241f475f3ef2f 686944 web optional sitebar_3.3.8.orig.tar.gz
cdc186193c2ad2d4e69f220dd8372ccd 22552 web optional sitebar_3.3.8-7etch1.diff.gz
16eb8791acea7cf1c99ac61b7b47e4b1 709524 web optional sitebar_3.3.8-7etch1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHVvlM62zWxYk/rQcRAkCFAJ4hjGacLh7HZM51uV2G3/dFYQOs1ACfT32n
ORg51pFyQkF8/eLjToY9k1I=
=Y9Dx
-----END PGP SIGNATURE-----
Accepted:
sitebar_3.3.8-7etch1.diff.gz
to pool/main/s/sitebar/sitebar_3.3.8-7etch1.diff.gz
sitebar_3.3.8-7etch1.dsc
to pool/main/s/sitebar/sitebar_3.3.8-7etch1.dsc
sitebar_3.3.8-7etch1_all.deb
to pool/main/s/sitebar/sitebar_3.3.8-7etch1_all.deb