Accepted couchdb 1.2.0-5+deb7u1 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 21 Jan 2018 16:03:02 +0100
Source: couchdb
Binary: couchdb
Architecture: source amd64
Version: 1.2.0-5+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
couchdb - RESTful document oriented database
Changes:
couchdb (1.2.0-5+deb7u1) wheezy-security; urgency=high
.
* Non-maintainer upload by the Wheezy LTS Team.
* CVE-2017-12635
Prevent non-admin users to give themselves admin privileges.
* CVE-2017-12636
Blacklist some configuration options to prevent execution of
arbitrary shell commands as the CouchDB user
Checksums-Sha1:
bd23c02fc72bc9bfc8c89e0f5117497abc1fa2ac 2070 couchdb_1.2.0-5+deb7u1.dsc
da17af99cf3b1f9a89f0051b7d9de0cbd6fe81b6 1326925 couchdb_1.2.0.orig.tar.gz
1605940a1798a8c4422394c43bc0e9149eb8e083 15221 couchdb_1.2.0-5+deb7u1.debian.tar.gz
8590582730219c17b97bfa8463f07fa20d58451c 1037808 couchdb_1.2.0-5+deb7u1_amd64.deb
Checksums-Sha256:
cae203928fe52fb82e9d71d8a2f1a5182ff0af10757e00848c49a29a5892ebc9 2070 couchdb_1.2.0-5+deb7u1.dsc
0f254ddea2471dbc4d3c6cd1fa61e4782c75475fb325024e10f68bf1aa8d5c37 1326925 couchdb_1.2.0.orig.tar.gz
2d7b4252e09c0b24830b1f4645ab59396e9cbf2ab7a887a92251253a6ecb844d 15221 couchdb_1.2.0-5+deb7u1.debian.tar.gz
dcf13c5f46924fa85223367771b201b74c961a974787d054f63c1154cf29b919 1037808 couchdb_1.2.0-5+deb7u1_amd64.deb
Files:
35173c3d6c81fb68b0e45640cc61c338 2070 misc optional couchdb_1.2.0-5+deb7u1.dsc
a5cbbcaac288831b3d8a08b725657f10 1326925 misc optional couchdb_1.2.0.orig.tar.gz
6b273056d51183ac24a51f25d0f4506c 15221 misc optional couchdb_1.2.0-5+deb7u1.debian.tar.gz
71d26edf77f084d0909e5c2546c8229f 1037808 misc optional couchdb_1.2.0-5+deb7u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=O39z
-----END PGP SIGNATURE-----